icheernoom

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

HSC24RedTeamInfra

Slides and Codes used for the workshop Red Team Infrastructure Automation

CoercedPotatoRDLL

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

decomp2dbg

A plugin to introduce interactive symbols into your debugger from your decompiler

rlwrap

A readline wrapper

gitscraper

A tool which scrapes public github repositories for common naming conventions in variables, folders and files

ludus_sccm

An Ansible collection that installs an SCCM deployment with optional configurations.

aquatone

A Tool for Domain Flyovers

analysis-of-anti-analysis

writings on anti-reverse engineering.

stegseek

:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

Tibs-TUBs

A collection of TUBs (Totally Useless Bambdas) for Burp Suite, created by Tib3rius & friends.

PowershellKerberos

Some scripts to abuse kerberos using Powershell

uptime-kuma

A fancy self-hosted monitoring tool

Kerberos-Workshop

Kerberos workshop to understand kerberos authentication and implement same in hadoop environment

windapsearch

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries

dns-exe-persistance

Invoke-DHCPCheckup

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

decrypt-ios-apps-script

Python script to SSH into your jailbroken device, decrypt an iOS App and transfer it to your local machine

conpass

Continuous password spraying tool

f1rstResponder

f1rstResponder is designed to act as a honeypot for instances of responder running on a network. It attempts to connect to bad hostnames on the network and listens for a DNS, MDNS, or LLMNR response that resolves the bad hostnames, this gives an indication of responder poisioning responses. Optionally, f1rstResponder can be configured to connect to preconfigured bad hostnames (such as something that would match a common typo on your network) and it can also be configured to send logs to an external syslog server.

PsCabesha-tools

Powershell crazy and sometimes diabolic scripts

SeLoadDriverPrivilege

Windows Privilege Escalation

tenet

A Trace Explorer for Reverse Engineers

RefHunter

User-friendly reference finder in IDA

deoptfuscator

Deobfuscator for Android Application

RedTeaming-Tactics-and-Techniques

Red Teaming Tactics and Techniques

CMDLL

the most basic DLL ever to pop a cmd.

python-for-awae

Python for AWAE (Advanced Web Attacks and Exploitation)