syphersec

Old-Powershell-payload-Excel-Delivery

Contains automatic persistence.

PowerWorm

Analysis, detection, and removal of the "Power Worm" PowerShell-based malware

injectors

There are non-obfuscated, commented versions of some of Veil-Evasion's shellcode-injection and Meterpreter payload modules.

Kautilya

Kautilya is a toolkit which provides various payloads for a Human Interface Device which helps in Penetration Testing.

awesome-shell

A curated list of awesome command-line frameworks, toolkits, guides and gizmos. Inspired by awesome-php.

clusterd

application server attack toolkit

DFAK

The Digital First Aid Kit

dnsftp

Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.

docker-streisand

DotNetAVBypass

This project uses the .NET framework to bypass Antivirus solutions.

fast_meterpreter

feed_fetchers

Fetch threat intel feeds and normalize content

hackernews

Hacker News web site source code mirror.

ir-triage-toolkit

Create an incident response triage toolkit for use with Windows or Linux.

malcom

Malcom - Malware Communications Analyzer

malware

virus collection source code

marvelous-org

A cheat script and names file for creating a gigantic fake active directory organisation completely filled with characters from the comic book universe

nanomet

Nano meterpreter shell based on TinyMet

nishang

Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security and post exploitation during penetration tests.

Phishing

Scripts used for phishing campaigns

PowerShell-AD-Recon

PowerShell Scripts I find useful

ps1encode-old

pyobfuscate

pyobfuscate

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

RubyOSINT

Ruby based script to perform application scanning of a URL, looking for specific pages to target.

streisand

Streisand sets up a new server running L2TP/IPsec, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, and a Tor bridge. It also generates custom configuration instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.

theZoo

A repository of LIVE malwares for your own joy and pleasure

Threatelligence

Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

ved-decode