matterpreter

DefenderCheck

Identifies the bytes that Microsoft Defender flags on.

OffensiveCSharp

Collection of Offensive C# Tooling

Shhmon

Neutering Sysmon via driver unload

SHAPESHIFTER

Companion PoC for the "Adventures in Dynamic Evasion" blog post

spotter

Targeted Payload Execution

FindETWProviderImage

Quickly search for references to a GUID in DLLs, EXEs, and drivers

cpuid

A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class

getDA.sh

Identify common attack paths to get Domain Administrator

misc

Collection of things I've written on pentests to make life easier.

StandIn

StandIn is a small .NET35/45 AD post-exploitation toolkit

SharpStay

.NET project for installing Persistence

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Empire

Empire is a PowerShell and Python post-exploitation agent.

openedr

Open EDR public repository

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

cpuid_for_antivm

A collection of cpuid instruction implementations for anti-vm purposes.

elam

A Practical example of ELAM (Early Launch Anti-Malware)

EmPyre

A post-exploitation OS X/Linux agent written in Python 2.7

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

ferrisetw

Basically a KrabsETW rip-off written in Rust

InternetCatFeeder

Raspberry Pi internet-enabled cat feeder using the PicoBorg Reverse

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

Mythic

A collaborative, multi-platform, red teaming framework

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

SharpHound

dnSpy

.NET debugger and assembly editor

PUBG-map-hack

Map hack solution for PUBG

Rubeus

Trying to tame the three-headed dog.

SharpHound3

C# Data Collector for the BloodHound Project, Version 3

yubikey-luks

Two factor authentication for harddisk encryption