aus-mate

gpt-engineer

Platform to experiment with the AI Software Engineer. Terminal based. NOTE: Very different from https://gptengineer.app

subfinder

Fast passive subdomain enumeration tool.

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

HiddenDesktop

HVNC for Cobalt Strike

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

HardHatC2

A C# Command & Control framework

ADExplorerSnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

AtomLdr

A DLL loader with advanced evasive features

Inline-Execute-PE

Execute unmanaged Windows executables in CobaltStrike Beacons

OffensiveCpp

This repo contains C/C++ snippets that can be handy in specific offensive scenarios.

NetworkNightmare

Network Pentesting Mindmap

HWSyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

DavRelayUp

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

MagicSigner

Signtool for expired certificates

LinkedInDumper

Python 3 script to dump/scrape/extract company employees from LinkedIn API

ThreadlessInject-BOF

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

Cerberus

A C++ tool to unstrip Rust/Go binaries (ELF and PE)

SharpWebServer

Red Team oriented C# Simple HTTP & WebDAV Server with Net-NTLM hashes capture functionality

CVE-2022-39952

POC for CVE-2022-39952

ETWHash

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

AtlasReaper

A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.

Obsidian-Vault-Structure

CVE-2023-29343

airstrike

PatchlessInlineExecute-Assembly

Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.

GhostFart

OneNoteAnalyzer

A C# based tool for analysing malicious OneNote documents

JayFinder

Find DLLs with RWX section

RedELK-workshop

Items related to the RedELK workshop given at security conferences