Beast code in Giters

ahaslett's starred repositories

mutant

Mutant is an open-source, garbage-collected programming language that tries to enable security by default.

Language:GoMIT5100

auditd

Best Practice Auditd Configuration

Apache-2.0142600

RandomTSScripts

Collection of random RedTeam scripts.

Language:C++18800

BadZure orchestrates the setup of Azure AD tenants, populating them with diverse entities while also introducing common security misconfigurations to create vulnerable tenants with multiple attack paths.

Language:PowerShellApache-2.037700

wdk_template

Windows kernel driver template for cmkr (with testsigning).

Language:C++BSL-1.02900

limba

compile-time control flow obfuscation using mba

Language:C++Apache-2.016500

lolbin-poc

Small PoC of using a Microsoft signed executable as a lolbin.

Language:C++13000

talks

Slides, recordings and materials of my public presentations, talks and workshops.

Language:Jupyter NotebookCC-BY-4.07200

bubbletea

A powerful little TUI framework 🏗

Language:GoMIT2567200

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

225500

EDRSandblast

Language:C141800

CheekyBlinder

Enumerating and removing kernel callbacks using signed vulnerable drivers

Language:C++53600

Stardust

A modern 64-bit position independent implant template

Language:C98800

GhidraEmu

Native Pcode emulator

Language:JavaMIT27300

prog_lib

73800

Havoc

The Havoc Framework.

Language:GoGPL-3.0635000

DFSCoerce

Language:Python70500

Sandbox_Scryer

Language:C#GPL-3.021900

sliver

Adversary Emulation Framework

Language:GoGPL-3.0798400

WFH

Language:Python39400

FreshyCalls

FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

Language:C++MPL-2.030500

SysmonSimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

Language:CLGPL-2.182900