br3ach3r-fff

Elemental

Elemental - An ATT&CK Threat Library

PowerShellForPentesters

Course repository for PowerShell for Pentesters Course

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

DeTTECT

Detect Tactics, Techniques & Combat Threats

lsassy

Extract credentials from lsass remotely

Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

OffensiveVBA

This repo covers some code execution and AV Evasion methods for Macros in Office documents

Rubeus

Trying to tame the three-headed dog.

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

attack-arsenal

A collection of red team and adversary emulation resources developed and released by MITRE.

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

Cobalt-Strike-CheatSheet

Some notes and examples for cobalt strike's functionality

Cobalt-Wipe

Cobalt wipe is the non-commercial version of Cobalt-Strike 4.3 (May 2021 Release)

CRTO

Certified Red Team Operator

Development-Projects

gsocket

Connect like there is no firewall. Securely.

hyperdrive

C2-Framework

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

linux-exploit-suggester

Linux privilege escalation auditing tool

Logstash

Contains Logstash related content including tons of Logstash configurations

maldev-for-dummies

A workshop about Malware Development

PythonDataScienceHandbook

Python Data Science Handbook: full text in Jupyter Notebooks

rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

SharpSploit

SharpSploit is a .NET post-exploitation library written in C#

sigma

Generic Signature Format for SIEM Systems

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

sysmon-config

Sysmon configuration file template with default high-quality event tracing

wfuzz

Web application fuzzer