jwardsmith

GHunt

🕵️‍♂️ Offensive Google framework.

opencti

Open Cyber Threat Intelligence Platform

deepdarkCTI

Collection of Cyber Threat Intelligence sources from the deep and dark web

pe-bear

Portable Executable reversing tool with a friendly GUI

hacks

A collection of hacks and one-off scripts

at-ps

Adversary Tactics - PowerShell Training

SafetyKatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

SharpDPAPI

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

decider

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

PurpleSharp

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

PSPKIAudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

SharpDump

SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.

wwwolf-php-webshell

WhiteWinterWolf's PHP web shell

Koh

The Token Stealer

OperatorsKit

Collection of Beacon Object Files (BOF) for Cobalt Strike

SysmonSearch

Investigate suspicious activity by visualizing Sysmon's event log

botsv1

ToolAnalysisResultSheet

Tool Analysis Result Sheet

SharpRoast

DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.

RestrictedAdmin

Remotely enables Restricted Admin Mode

DeepPass

Hunting for passwords with deep learning

Detection-Ideas-Rules

Detection Ideas & Rules repository.

webwrap

🌯 Give me a web shell, I'll give you a terminal.

Invoke-Evasion

PowerShell Obfuscation and Data Science

presentations

SpecterOps Presentations

Web-Shells

plaintext

PurpleTeamPlaybook

Active Directory Purple Team Playbook

SA-admon

Create a living replica of Active Directory within KV Stores using admon data.