tid4l

PingRAT

PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

bof_template

A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use internal Beacon APIs. BOFs are a way to rapidly extend the Beacon agent with new post-exploitation features.

RemotePotato0

Windows Privilege Escalation from User to Domain Admin.

Havoc

The Havoc Framework.

RedEye

RedEye is a visual analytic tool supporting Red & Blue Team operations

ReflectiveDLLInjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

Minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

EDRs

redshell

An interactive command prompt for red teaming and pentesting. Automatically pushes commands through SOCKS4/5 proxies via proxychains. Optional Cobalt Strike integration pulls beacon SOCKS4/5 proxies from the team server. Automatically logs activities to a local CSV file and a Cobalt Strike team server (if configured).

gokart

A static analysis tool for securing Go code

RedDrop

RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

CrackMapExec

A swiss army knife for pentesting networks

impacket

Impacket is a collection of Python classes for working with network protocols.

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

sliver

Adversary Emulation Framework

Mythic

A collaborative, multi-platform, red teaming framework

ghidra

Ghidra is a software reverse engineering (SRE) framework

C2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.