br-sn

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

PrivescCheck

Privilege Escalation Enumeration Script for Windows

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

AlternativeShellcodeExec

Alternative Shellcode Execution Via Callbacks

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

Backstab

A tool to kill antimalware protected processes

bruteforce-lists

Some files for bruteforcing certain things.

leaky-paths

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

OffensivePipeline

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

SpoolFool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

AtomLdr

A DLL loader with advanced evasive features

nccfsas

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

BOF_Collection

Various Cobalt Strike BOFs

EXCELntDonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

Mapping-Injection

Just another Windows Process Injection

Dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

trigen

Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.

SylantStrike

Simple EDR implementation to demonstrate bypass

OSCE

Collection of Windows usermode exploits targeting various third-party software applications, these exploits were written in preparation for the Offsec CTP/OSCE certification

REW-sploit

Emulate and Dissect MSF and *other* attacks

CVE-2020-1034

PoC demonstrating the use of cve-2020-1034 for privilege escalation

pe2shc-to-cdb

Convert shellcode generated using pe_2_shellcode to cdb format.

directInjectorPOC

Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.

OutlookParasite

Outlook persistence using VSTO add-ins

phoca

Tool to analyze and detect MITM phishing toolkits on the web.

RPCDump

Process_Protection_Level_BOF

siem-from-scratch

SIEM-From-Scratch is a drop-in ELK based SIEM component for your Vagrant infosec lab

OSR_DeviceTree_Vuln

undonut

Unpacker for donut shellcode