mhaskar

Octopus

Open source pre-operation C2 server based on python and powershell

DNSStager

Hide your payload in DNS

ExchangeFinder

Find Microsoft Exchange instance for a given domain and identify the exact version

XMLDecoder-payload-generator

A simple python script to generate XML payloads works for XMLDecoder based on ProcessBuilder and Runtime exec

Bughound

Static code analysis tool based on Elasticsearch

Shellcode-In-Memory-Decoder

A simple C implementation to decoded your shellcode and writes it directly to memory

CVE-2020-8813

The official exploit for Cacti v1.2.8 Remote Code Execution CVE-2020-8813

shellcode-process-injection

Simple C implementation to perform shellcode process injection via win32 APIs

XSSRadare

A Cross Site Scripting scanner using selenium webdriver

DNSKeyGen

A tool to exchange decryption keys for command and control (C2) beacons and implants through DNS records.

MalleableC2-Profiles

A collection of Cobalt Strike Malleable C2 profiles

CVE-2020-12078

The official exploit for Open-AudIT v3.3.1 Remote Code Execution CVE-2020-12078

CVE-2020-14947

The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947

Octopus-C2-RedTeam-infrastructure-automation

CVE-2019-20224

The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224

CVE-2019-16662

The official exploit for rConfig 3.9.2 Pre-auth Remote Code Execution CVE-2019-16662

CVE-2019-15029

The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029

CVE-2019-16663

The official exploit for rConfig 3.9.2 Post-auth Remote Code Execution CVE-2019-16663

CVE-2023-0315

The official exploit for Froxlor Remote Code Execution CVE-2023-0315

powershell-extractor-elasticsearch

Python script to extract powershell scrips from elasticsearch based on windows event "4104"

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

impacket

Impacket is a collection of Python classes for working with network protocols.

BOF_Collection

Various Cobalt Strike BOFs

MicrosoftDCFTokenRequester

Simple and lazy script to request tokens from Microsoft using Device Code Flow

shields

Concise, consistent, and legible badges in SVG and raster format

decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

Leoid

b1twis3 Portfolio

Medusa

Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic

mhaskar

SharPyShell

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications