n0pe-sled

Postfix-Server-Setup

Apache2-Mod-Rewrite-Setup

Quickly Implement Mod-Rewrite in your infastructure

WMI-Persistence

n0pe-sled.github.io

koadic

Koadic C3 COM Command & Control - JScript RAT

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

freeipa-container

FreeIPA server in containers; see hub.docker.com for the images:

ThreatHunter-Playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

actions-test

Apollo

A .NET Framework 4.0 Windows Agent

AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

CobaltStrike-ToolKit

Some useful scripts for CobaltStrike

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

DetectionLab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

docker-bastion

Basic Docker Bastion

Empire

Empire is a PowerShell and Python post-exploitation agent.

ForgeArmory

ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).

garble

Obfuscate Go builds

LinkedInt

LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

LocklessBof

Lockless BOF

lterm

lterm is a small script built to install a bash hook for full terminal logging.

offensive_macos

Tracking of offensive macOS tooling, blogs, and related helpful information

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PowerMeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

rust-linux-darwin-builder

Use the same Docker image to cross-compile Rust x86_64/ARM64 programs for Linux and macOS (osxcross).

SharpAltShellCodeExec

Alternative Shellcode Execution Via Callbacks in C# with P/Invoke

SharpShares

Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain

TTPForge

The TTPForge is a Framework created to facilitate the development, automation, and execution of Tactics, Techniques, and Procedures (TTPs).