d3adc0de

SwiftSpy

macOS keylogger, clipboard monitor, and screenshotter

hushcon_poc

Simple Shellcode development/injection on macOS

xpcutil

Golang Tool to interact with Launchd and other services with XPC

macOSTools

macOS Offensive Tools

goesf

Golang command line tool for the macOS Endpoint Security Framework

poseidon

Apfell Golang macOS/Linux/Windows implant

raven

CobaltStrike External C2 for Websockets

FirefoxStealer

Awesome-CobaltStrike

List of Awesome CobaltStrike Resources

SlackPirate

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

RIP

ServiceMove-BOF

New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.

Cloud-Katana

Unlocking Serverless Computing to Assess Security Controls

orthrus

Uses Apple's MDM protocol to backdoor a device with a malicious profile.

typhon

Payload designed for targeting Jamf enrolled devices.

redteam-infra

kimagure

retroarch_system

Compilation of BIOSes for various emulation platforms

HelpColor

Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type

uberducky

Wireless USB Rubber Ducky triggered via BLE (make your Ubertooth quack!)

AWS-Books

"Building software for the cloud requires developing stateless applications." ― Michael J. Kavis

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

GDir-Thief

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.

retroflag-picase

RetroFlag Pi-Case Safe Shutdown

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Redcloud

Automated Red Team Infrastructure deployement using Docker

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

PoisonApple

macOS persistence tool

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

hashiscan

Scanning / Exploiting vulnerable hashicorp infra