n0pe-sled

dotfiles

PowerMeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

Cheats

Various Cheat Sheets

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

gitrob

Reconnaissance tool for GitHub organizations

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Ebowla

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Invoke-DOSfuscation

Cmd.exe Command Obfuscation Generator & Detection Test Harness

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Red-Baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

3snake

Tool for extracting information from newly spawned processes

fido

Teaching old shellcode new tricks

caldera

Automated Adversary Emulation Platform

Striker

Striker is an offensive information and vulnerability scanner.

CobaltStrike-ToolKit

Some useful scripts for CobaltStrike

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

Postfix-Server-Setup

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

n0pe-sled.github.io

BloodHound

Six Degrees of Domain Admin