crimsoncore Goto Github PK

admodule

Microsoft signed ActiveDirectory PowerShell module

badblood

BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

defendercheck

Identifies the bytes that Microsoft Defender flags on.

dfir

dnsexfiltrator

Data exfiltration over DNS request covert channel

docker-guacamole

docker_auditbeat

auditbeat docker

docker_coder

jumphost with coder and ansible

docker_elastalert

custom built docker on Ubuntu 16.04 with elastalert

docker_filebeat

filebeat 7.4.2 in docker

docker_kali

docker_mdbook

docker_metasploit

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

invoke-obfuscation

PowerShell Obfuscator

jupyter_threathunt

jupyter notebook to deploy terraform_threathunt an ansible_threathunt

logstashrest

logstash configuration with REST API plugin

mdbook

Create book from markdown files. Like Gitbook but implemented in Rust

pezor

Open-Source PE Packer

powerevents

PowerEvents is a PowerShell module that assists in the registration of WMI permanent event subscriptions.

psgumshoe

pyfuscation

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

shellcodewrapper

Shellcode wrapper with encryption for multiple target languages

sigma

Generic Signature Format for SIEM Systems

silenttrinityteam

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

threathunt

threathunt_student

threathunt repo for students