cpnj00

OperatorsKit

Collection of Beacon Object Files (BOF) for Cobalt Strike

Cobalt-Strike-CheatSheet

Some notes and examples for cobalt strike's functionality

File-Tunnel

Tunnel TCP connections through a file

aws-customer-playbook-framework

This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Knowledge-Management-for-Offensive-Security-Professionals

Knowledge Management for Offensive Security Professionals Official Repository

CSSG

Cobalt Strike Shellcode Generator

CS-Situational-Awareness-BOF

Situational Awareness commands implemented using Beacon Object Files

C2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

CobaltStrike-ToolKit

Some useful scripts for CobaltStrike

dvka

Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

PEzor

Open-Source Shellcode & PE Packer

awesome-command-control

A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assignments.

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

VMwareCloak

A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

CMLab

Configuration Management (CM) Security Playground. A small enterprise security lab to practice automation + CM tooling like Ansible, Chef, Puppet, DSCv2, DSCv3, SaltStack.

kubetruth

The CloudTruth integration for kubernetes that pushes parameter updates into kubernetes config maps and secrets

Cloud-Security

This Repo serves as a collection of shared security and penetration testing resources for the cloud.

emu

This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense

SploitScan

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

sunburst_countermeasures

omnisci3nt

Unveiling the Hidden Layers of the Web – A Comprehensive Web Reconnaissance Tool

proctools

Small toolkit for extracting information and dumping sensitive strings from Windows processes

SqliSniper

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

IPPrintC2

PoC for using MS Windows printers for persistence / command and control via Internet Printing

attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

No-Consolation

A BOF that runs unmanaged PEs inline

PrintNotifyPotato

PrintNotifyPotato