BlackArrow

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

pivotnacci

A tool to make socks connections through HTTP agents

Handly

Abuse leaked token handles.

EAP_buster

EAP_buster is a simple bash script that lists what EAP methods are supported by the RADIUS server behind a WPA-Enterprise access point

wappy

Discover web technologies in web applications from your terminal

Certify

Active Directory certificate abuse.

advisories

Advisories and Proofs of Concept by BlackArrow

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

malware-research

Malware campaigns and APTs research by BlackArrow

fozar

Fozar allows you to traverse commits across multiple repositories matching against user supplied regex

EfsPotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

wap

Wappalyzer python library

impacket

Impacket is a collection of Python classes for working with network protocols.

ntlm_challenger

Parse NTLM challenge messages over HTTP and SMB

Pachine

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

tactical-hunting

Certipy

Tool for Active Directory Certificate Services enumeration and abuse