benzetaa

badsecrets

A library for detecting known secrets across many web frameworks

craXcel

Command line application to unlock Microsoft Office password protected files.

PsMapExec

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

DLLirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

AD_Miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

BucketLoot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

evilginx2-TTPs

Reverse engineered to remove IOCs, added Exchange Online Protection IP blacklist and bing-bot user-agent blocking, DNS configuration and notes on usage.

DLL-Proxy-Hijacking-Microsoft-Teams

Tutorial covering how to discover DLLs for Hijacking and how to create proxy DLLS using Microsoft Teams as an example

Banshee

Experimental Windows x64 Kernel Rootkit.

O365-BITB

AutoSmuggle

Utility to craft HTML or SVG smuggled files for Red Team engagements

ADOKit

Azure DevOps Services Attack Toolkit

Win32Api-Abusing-Tokens

Manipulating tokens for SeImpersonatePrivilege exploitation using Windows API

quickemu

Quickly create and run optimised Windows, macOS and Linux virtual machines

Evilginx3-Phishlets

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3. May be updated periodically.

MultiDump

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

Shhhloader

Syscall Shellcode Loader (Work in Progress)

SSH-Snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

Malicious-LNK-File-Abuse-Hotkey-Feature

Crafting a malicious LNK file with ctrl+c hotkey & execute it everytimes typing ctrl+c hotkey

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

SharpADWS

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).

go-secdump

Tool to remotely dump secrets from the Windows registry

rbcd-attack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

reverse-ssh

Statically-linked ssh server with reverse shell functionality for CTFs and such

linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

ThievingFox