Beast code in Giters

Ward-V's starred repositories

PackMyPayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

Language:PythonMIT85300

obfuscator

ollvm，base on llvm-clang 5.0.2, 6.0.1 , 7.0.1,8.0,9.0,9.0.1,10.x,11.x,12.x,13.x,14.x,swift-llvm-clang 5.0,swift-llvm-clang 5.5

107300

Shhhloader

Syscall Shellcode Loader (Work in Progress)

Language:PythonGPL-3.0111700

Veil

Veil 3.1.X (Check version info in Veil at runtime)

Language:PythonGPL-3.0398900

ShellWasp is a tool to help build shellcode that utilizes Windows syscalls, while overcoming the portability problem associated with Windows syscalls. ShellWasp is built for 32-bit, WoW64. ShellWasp 2.0 includes novel ways to invoke the syscall in WoW64.

Language:PythonMIT15700

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

Language:CMIT968900

pywhisker

Python version of the C# tool for "Shadow Credentials" attacks

Language:PythonGPL-3.058300

ldap_shell

AD ACL abuse

Language:Python25400

PKINITtools

Tools for Kerberos PKINIT and relaying to AD CS

Language:PythonMIT61900

aclpwn.py

Active Directory ACL exploitation with BloodHound

Language:PythonMIT70000

Ventoy

A new bootable USB solution.

Language:CGPL-3.06234900

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

Language:PowerShellGPL-3.0201200

EDRSandblast

Language:C148000

Dumpy

Reuse open handles to dynamically dump LSASS.

Language:RustGPL-3.023300

armory

The Official Sliver Armory

8200

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Language:PythonNOASSERTION1124700

DFSCoerce

Language:Python72200

computer-science

🎓 Path to a free self-taught education in Computer Science!

MIT17151600

TLS-Scanner

The TLS-Scanner Module from TLS-Attacker

Language:JavaNOASSERTION26200

SIETpy3

Rewriting SIET to python3

Language:PythonBSD-3-Clause4300

ranger

A VIM-inspired filemanager for the console

Language:PythonGPL-3.01553500

neofetch

🖼️ A command-line system information tool written in bash 3.2+

Language:ShellMIT2206100

securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Language:Shell321700

Ward-V