red-team-engagement
There are 9 repositories under red-team-engagement topic.
- Language:Go 7690
ivan-sincek / penetration-testing-cheat-sheet
Work in progress...
Language:PHP 586tobor88 / PowerShell-Red-Team
Collection of PowerShell functions a Red Teamer may use in an engagement
Language:PowerShell 463PHP shells that work on Linux OS, macOS, and Windows OS.
Language:PHP 425Work in progress...
Work in progress...
Language:JavaScript 336Penetration testing utility and antivirus assessment tool.
Language:C++ 309PowerShell scripts for communicating with a remote host.
Language:PowerShell 289Work in progress...
Language:JavaScript 270lmco / dart
DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.
Language:Python 251Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests.
Language:Python 220Sh0ckFR / InlineWhispers2
Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2
Language:Assembly 172gbiagomba / Sherlock
This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
Language:Shell 82Learn how to set up a fake authentication web page on a fake WiFi network.
Language:PHP 79Windows OS keylogger with a hook mechanism (i.e. with a keyboard hook procedure).
Language:C++ 77JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.
Language:Java 54- Language:Go 46
sahadnk72 / jecretz
Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets
Language:Python 40david3107 / squatm3
Squatm3 is a python tool designed to enumerate available domains generated modifying the original domain name through different techniques
Language:Python 39hexachordanu / Red-Team-Essentials
This repo will contain some basic pentest/RT commands.
Language:PowerShell 35- Language:Python 33
Phishing mobile application made in React Native for both Android and iOS devices.
Language:JavaScript 30Simple API for storing all incoming XSS requests.
Language:HTML 30ice-wzl / wmiexec2
wmiexec2.0 is the same wmiexec that everyone knows and loves (debatable). This 2.0 version is obfuscated to avoid well known signatures from various AV engines. It also has a handful of additional built in modules to help automate some common tasks on Red team engagements.
Language:Python 23Secure website with a registration, sign in, session management, and CRUD controls.
Language:PHP 21Search Google Dorks like Chad. / Social media takeover tool.
Language:Python 20Exfiltrate data with DNS queries. Based on CertUtil and NSLookup.
Language:Batchfile 19safebuffer / edge-hot-delivery
edge --> powerpoint --> remote-file --> shell
Language:HTML 15Viralmaniar / Reg-Hives
This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. Use it to copy SYSTEM, SECURITY and SAM hives and download them back to the attacker machines.
Language:Python 14Web crawler and downloader based on GNU Wget.
Language:Shell 13mytechnotalent / 0x01-ARM-32-Hacking-Hello-World
ARM 32-bit Raspberry Pi Hacking Hello World example in Kali Linux.
Language:Assembly 12ARM 32-bit Raspberry Pi Hacking Int example in Kali Linux.
Language:C 11Brute force a JWT token. Script uses multithreading.
Language:Python 10Extend wordlist by appending digits and special characters to each word.
Language:Python 9
