redt1de

oneshell

Reverse shell listener and payload generator designed to work on most Linux targets

thc-tips-tricks-hacks-cheat-sheet

Various tips & tricks

lsa-whisperer

Tools for interacting with authentication packages using their individual message protocols

CrimsonEDR

Simulate the behavior of AV/EDR for malware development training.

cmdk

Fast, unstyled command menu React component.

vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

go-smb

A client library to interact with Windows RPC services such as MS-SRVS and MS-RRP.

physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

T-Dongle-Ducky

LilyGo T-Dongle-S3 turned into a Rubber Ducky with wifi

Jomungand

Shellcode Loader with memory evasion

ldeep

In-depth ldap enumeration utility

maldev-for-dummies

A workshop about Malware Development

NetExec

The Network Execution Tool

LoudSunRun

Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven

MaldevAcademyLdr.1

Amsi_Bypass_In_2023

Amsi Bypass payload that works on Windwos 11

Gotato

Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.

DllNotificationInjection

A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

getsystem

Small utility package for manipulating Windows process tokens

SigFlip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.