henshin

LethalHTA

Lateral Movement technique using DCOM and HTA

WBCDomain

An AWS hosted domain designed for practicing lateral movement techniques.

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

kekeo

A little toolbox to play with Microsoft Kerberos in C

redteam

Red Team Scripts by d0nkeys (ex SnadoTeam)

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

exploits

Some of my exploits.

msdat

MSDAT: Microsoft SQL Database Attacking Tool

de4dot

.NET deobfuscator and unpacker.

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

aem-hacker

byob

An open-source post-exploitation framework for students, researchers and developers.

CVE-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

Windows-RCE-exploits

The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.

nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

FCL

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

pathbrute

Pathbrute

pycobalt

Cobalt Strike Python API

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

WebShell

Webshell && Backdoor Collection

DoHC2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

CVE-2018-10933

Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)

relayer

SMB Relay Attack Script

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

Sharp-WMIExec

server

Hashtopolis - distributed password cracking with Hashcat

DomLink

A tool to link a domain with registered organisation names and emails, to other domains.