TravisEminhizer

Mythic

A collaborative, multi-platform, red teaming framework

nanodump

The swiss army knife of LSASS dumping

inceptor

Template-Driven AV/EDR Evasion Framework

AggressorScripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Backstab

A tool to kill antimalware protected processes

RedTeaming_CheatSheet

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

Stardust

A modern 64-bit position independent implant template

LOLDrivers

Living Off The Land Drivers

Cobalt-Strike-CheatSheet

Some notes and examples for cobalt strike's functionality

Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook

FilelessPELoader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

NimPlant

A light-weight first-stage C2 implant written in Nim.

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

NetNTLMtoSilverTicket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

ThreadlessInject

Threadless Process Injection using remote function hooking.

SilentMoonwalk

PoC Implementation of a fully dynamic call stack spoofer

HWSyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

GhostTask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

SQLRecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

PSByPassCLM

Bypass for PowerShell Constrained Language Mode

Malleable-CS-Profiles

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

Malleable-C2-Profiles

Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.

RedditC2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

CallStackMasker

A PoC implementation for dynamically masking call stacks with timers.

Windows-Penetration-Testing

Technical notes, AD pentest methodology, list of tools, scripts and Windows commands that I find useful during internal penetration tests and assumed breach exercises (red teaming)

CVE-2023-36874

KillDefenderBOF

Beacon Object File PoC implementation of KillDefender

injectEtwBypass

CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)

envmapper

PoC pentest tool to run an analysis on data captured from a target network to build an undersatding of relationships between users, groups, processes, etc.