pywarez

Forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

ioctlance

A tool that is used to hunt vulnerabilities in x64 WDM drivers

Trawler

PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.

IronSharpPack

IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then reflective load the C# project.

AlternativeShellcodeExec

Alternative Shellcode Execution Via Callbacks

CSSG

Cobalt Strike Shellcode Generator

GOAD

game of active directory

DarkWidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

FilelessPELoader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

PowerLine

codewarrior

code-searching tool and static code analysis - Beta

MAL-CL

MAL-CL (Malicious Command-Line)

ThreadStackSpoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

ShellcodeFluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

DripLoader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

pycobalt

Cobalt Strike Python API

wesng

Windows Exploit Suggester - Next Generation

static-binaries

Various *nix tools built as statically-linked binaries

passphrase-wordlist

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

WinPwnage

UAC bypass, Elevate, Persistence methods

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

SecGen

Create randomly insecure VMs