adm1nPanda

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

crewAI

Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

OffensiveRust

Rust Weaponization for Red Team Engagements.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

trevorc2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework

AD_Miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

ProtectMyTooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

KubeHound

Tool for building Kubernetes attack paths

ChromeKatz

Dump cookies and credentials directly from Chrome/Edge process memory

transacted_hollowing

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

No-Consolation

A BOF that runs unmanaged PEs inline

Voidgate

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.

realm

Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.

wireguard-p2p

A tool for setting up WireGuard connections from peer to peer.

gocheck

Because AV evasion should be easy.

macOSTools

macOS Offensive Tools

sshimpanzee

SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)

DomainCheck

DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.

zombieant

Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

Hide-CobaltStrike

Hide your CobaltStrike PRO

cliam

Cloud agnostic IAM permissions enumerator

gssapi-abuse

A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks

awesome-gcp-pentesting

Tools and blogs I use to perform GCP red teams

GATOR

GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments

bofhound

Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel

mm-llm-hpo

Multimodal LLM agent for HPO

awesome-ai-red-teaming

A curated list of awesome AI Red Teaming resources and tools.

credstorm-sprayer

An offensive security password spraying tool

duoreverse