neutronnaa

TermsrvPatcher

Patcher for termsrv.dll for enabling concurrent remote desktop sessions on non-server Windows editions

Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

EfiCMake

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

Mod_Rewrite_Automation

Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

AggressorScripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

building-c2-implants-in-cpp

The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).

Red-Team-Infra

Redcloud

Automated Red Team Infrastructure deployement using Docker

RedLab

Files to automatically deploy red team Active Directory test lab

BlueTeam-Tools

Tools and Techniques for Blue Team / Incident Response

RedCommander

Red Team C2 Infrastructure built in AWS using Ansible!

ansible-role-evilginx2-docker

aggressor-scripts

Cobalt Strike Aggressor Scripts

RedTeaming_CheatSheet

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

powercat

netshell features all in version 2 powershell

SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

CobaltStrike-Config

Repository for archiving Cobalt Strike configuration

Malleable-CS-Profiles

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

SMS-CS-Notify

Notify Beacon Cobalt Strike via SMS

BokuLoader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

ElusiveMice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

goMalleable

🔎🪲 Malleable C2 profiles parser and assembler written in golang

Security-Datasets

Re-play Security Events

warhorse

Infrastructure Automation

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

SharpMove

.NET Project for performing Authenticated Remote Execution

MoveKit

Cobalt Strike kit for Lateral Movement

Awesome-CobaltStrike-Defence

Defences against Cobalt Strike