Matt Kelly's starred repositories
deepdarkCTI
Collection of Cyber Threat Intelligence sources from the deep and dark web
logging-log4j2
Apache Log4j 2 is a versatile, feature-rich, efficient logging API and backend for Java.
VmdkReader
.NET 4.0 Console App to browse VMDK / VHD images and extract files
weaponize_splunk
Weaponizing Splunk Presentation including Splunk Apps for penetration testing.
imaginaryC2
Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.
SharpShooter
Payload Generation Framework
UltimateAppLockerByPassList
The goal of this repository is to document the most common techniques to bypass AppLocker.
danderspritz-evtx
Parse evtx files and detect use of the DanderSpritz eventlogedit module
PenTesting-Scripts
A ton of helpful tools
Out-FINcodedCommand
POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities
OpenPasswordFilter
An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
7Zip4Powershell
Powershell module for creating and extracting 7-Zip archives
SlackShell
PowerShell to Slack C2
Red-Team-Infrastructure-Wiki
Wiki to collect Red Team infrastructure hardening resources
BloodHound
Six Degrees of Domain Admin
PyKerberoast
Implementing Kerberoast attack fully in python
p0wnedShell
PowerShell Runspace Post Exploitation Toolkit