lorentzenman

sheepl

Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments

youzer

Fake User Generator for Active Directory Environments

payday

Payload generator that uses Metasploit and Veil. Takes IP address as input and calls Veil. Use msfvenom to create payloads and writes resource handler files.

Apfell

A collaborative, multi-platform, red teaming framework

CheckPlease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

CobaltStrike-ToolKit

Some useful scripts for CobaltStrike

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

hostinjector

Multithreaded Host Header Redirection Scanner

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

MaliciousMacroGenerator

Malicious Macro Generator

Packer-For-vSphere-and-More

PoshC2_Python

Python Server for PoshC2

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

RedTeamCSharpScripts

C# Script used for Red Team

spoofcheck

Simple script that checks a domain for email protections

vCheck-AD

vCheck report with various plugins relating to Active Directory environments

Violent-Python-Companion-Files

Violent Python scripts used in book and few other required files

CatMyPhish

Search for categorized domain

certstream-python

Python library for connecting to CertStream

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

dojreleases

Python scraper of DOJ press releases

domainCat

Check Domain Categorization

InveighZero

C# LLMNR/NBNS spoofer

labseed

ntdsdotsqlite

A small utility to translate NTDS.dit files to SQLite format.

prowler

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and additional checks. Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

SharpView

C# implementation of harmj0y's PowerView

sysmon-config

Sysmon configuration file template with default high-quality event tracing

XSStrike

Most advanced XSS detection suite.