midnightslacker

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Modlishka

Modlishka. Reverse Proxy.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

uhp

Universal Honey Pot

notable

The Markdown-based note-taking app that doesn't suck.

data

Data and code behind the articles and graphics at FiveThirtyEight

Tortilla

imaginaryC2

Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.

awesome-yara

A curated list of awesome YARA rules, tools, and people.

RTA

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

Quasar

Remote Administration Tool for Windows

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

Kansa

A Powershell incident response framework

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

grumpy

Grumpy is a Python to Go source code transcompiler and runtime.

DbgShell

A PowerShell front-end for the Windows debugger engine.

XSStrike

Most advanced XSS scanner.

DanderSpritz_lab

A fully functional DanderSpritz lab in 2 commands

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

elasticintel

Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.

fluentd

Fluentd: Unified Logging Layer (project under CNCF)

ruler

A tool to abuse Exchange services

Lime-RAT

LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)

ember

Elastic Malware Benchmark for Empowering Researchers

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

HELK

The Hunting ELK

hyperpolyglot

hyperpolyglot.org

SharpShooter

Payload Generation Framework

MSRC-Security-Research

Security Research from the Microsoft Security Response Center (MSRC)