j00c3

AZ-104_Azure_Administrator

PurpleLab

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules, simulate logs, and undertake various security tasks, all accessible through a user-friendly web interface

Learning-EDR-and-EDR_Evasion

I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning path for me.

udemy-dl

A cross-platform python based utility to download courses from udemy for personal offline use.

IATUnhooker

IAT Unhooking proof-of-concept

Red-Team-Management

injectEtwBypass

CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)

mydumbedr

CsWhispers

Source generator to add D/Invoke and indirect syscall methods to a C# project.

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

DotNetHooking

Sample use cases of the .NET native code hooking technique

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

JustEvadeBro

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

FullBypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

RustRedOps

🦀 | RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust

CrimsonEDR

Simulate the behavior of AV/EDR for malware development training.

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook

SCADAPASS

SCADA StrangeLove Default/Hardcoded Passwords List

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

MAAS

Malware As A Service

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

A-Red-Teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

QuickDllProxy

A header-only DLL proxy stub generation library built with C++20.

Hidden-Screen-Capture

It is primary designed to be hidden and monitoring the computer activity. Take a screenshot of desktop in hidden mode using Visual C++ and save automatically to 'jpeg' file in every 30 second. 60+ Most Popular antivirus not detect this application while it is running on background.

DevSecOps

Ultimate DevSecOps library

ShellGhost

A memory-based evasion technique which makes shellcode invisible from process start to end.