neutronnaa

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

BlueTeam-Tools

Tools and Techniques for Blue Team / Incident Response

powercat

netshell features all in version 2 powershell

Security-Datasets

Re-play Security Events

AggressorScripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

Awesome-CobaltStrike-Defence

Defences against Cobalt Strike

BokuLoader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

Redcloud

Automated Red Team Infrastructure deployement using Docker

RedTeaming_CheatSheet

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

MoveKit

Cobalt Strike kit for Lateral Movement

ElusiveMice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

SharpMove

.NET Project for performing Authenticated Remote Execution

Malleable-CS-Profiles

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

warhorse

Infrastructure Automation

RedCommander

Red Team C2 Infrastructure built in AWS using Ansible!

building-c2-implants-in-cpp

The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).

aggressor-scripts

Cobalt Strike Aggressor Scripts

TermsrvPatcher

Patcher for termsrv.dll for enabling concurrent remote desktop sessions on non-server Windows editions

goMalleable

🔎🪲 Malleable C2 profiles parser and assembler written in golang

Mod_Rewrite_Automation

Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.

RedLab

Files to automatically deploy red team Active Directory test lab

CobaltStrike-Config

Repository for archiving Cobalt Strike configuration

Red-Team-Infra

ansible-role-evilginx2-docker

EfiCMake

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

SMS-CS-Notify

Notify Beacon Cobalt Strike via SMS