nicbrinkley

LazySign

Create fake certs for binaries using windows binaries and the power of bat files

HelpColor

Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type

No-Consolation

A BOF that runs unmanaged PEs inline

CloudPentestCheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

SharpCollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

OperatorsKit

Collection of Beacon Object Files (BOF) for Cobalt Strike

ProtectMyTooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

CoercedPotato

NetExec

The Network Execution Tool

guestlist

tool for identifying guest relationships between companies

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

Nuclei-Templates-Collection

Nuclei Templates Collection

AllForOne

AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,

MemFiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Ghostpack-CompiledBinaries

Compiled Binaries for Ghostpack (.NET v4.0)

Freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

Ghostwriter

The SpecterOps project management and reporting engine

CS-Remote-OPs-BOF

MSSQL-Attacker

MSSQL Database Attacker tool

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Practical-Ethical-Hacking-Resources

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

windows-coerced-authentication-methods

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops