cpo-eh Goto Github PK

pyramid

a tool to help operate in EDRs' blind spots

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

reverse-shell-cheatsheet

🙃 Reverse Shell Cheat Sheet 🙃

rexldr

Rex Shellcode Loader for AV/EDR evasion

rules

Repository of yara rules

s4utomato

Escalate Service Account To LocalSystem via Kerberos

sandman

Sandman is a NTP based backdoor for red team engagements in hardened networks.

sap-threat-modeling

The SAP Threat Modeling Tool is an on-premises open-source web application designed to analyze and visualize connections between SAP systems, helping users identify security risks and vulnerabilities. With features like inputting SAP credentials, scanning for connections, and visualizing the network.

sealighter

Sysmon-Like research tool for ETW

seth

Perform a MitM attack and extract clear text credentials from RDP connections

sharpblackout

Terminate AV/EDR leveraging BYOVD attack

sharpzerologon

Zerologon Exploiter I used on Cobalt Strike

shellcode-ghost

shelter

ROP-based sleep obfuscation to evade memory scanners

shoggoth

Shoggoth: Asmjit Based Polymorphic Encryptor

sliver

Adversary Emulation Framework

soaphound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

spawnwith

supernova

Real fucking shellcode encryptor & obfuscator tool

symbolizer-rs

A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

teamsphisher

Send phishing messages and attachments to Microsoft Teams users

thievingfox

totalrecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

toxicache

Go scanner to find web cache poisoning vulnerabilities in a list of URLs

tracecat

😼 The open source alternative to Tines / Splunk SOAR. Build AI-assisted workflows, orchestrate alerts, and close cases fast.

unlicense

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.