xpn

hexo

A fast, simple & powerful blog framework, powered by Node.js.

googletest

GoogleTest - Google Testing and Mocking Framework

firecracker

Secure and fast microVMs for serverless computing.

nebula

A scalable overlay networking tool with a focus on performance, simplicity and security

bottlerocket

An operating system designed for hosting containers

sliver

Adversary Emulation Framework

Windows-classic-samples

This repo contains samples that demonstrate the API used in Windows classic desktop applications.

wing

A programming language for the cloud ☁️ A unified programming model, combining infrastructure and runtime code into one language ⚡

Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

openedr

Open EDR public repository

AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

C3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

macOS-enterprise-privileges

For Mac users in enterprise environments, this application gives users control over the administration of their machine by elevating their level of access to administrator privileges on macOS. Users can set a timeframe in the application's settings to perform specific tasks, such as installing or removing an application.

Sharp-Suite

Also known by Microsoft as Knifecoat :hot_pepper:

kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

SocksOverRDP

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

saas-attacks

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

FalconHound

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool.

Spray-AD

A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.

ADEssentials

PowerShell Active Directory helper functions to manage healthy Active Directory

Recon-AD

Recon-AD, an AD recon tool based on ADSI and reflective DLL’s

chlonium

Chromium Cookie import / export tool

ESC

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

racepwn

Race Condition framework

User-Behavior-Mapping-Tool

poseidon

Apfell Golang macOS/Linux/Windows implant

pypykatz_wasm

pypykats in your browser

ansible-redelk

Ansible playbooks for instrumenting a Red Team environment with RedElk