redteams Goto Github PK

acl_edit

Assembly code to use for Windows kernel shellcode to edit winlogon.exe ACL

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

adsec

An introduction to Active Directory security

aggressivegadgettojscript

A Cobalt Strike Aggressor script to generate GadgetToJScript payloads

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

an-intro-2-win-ed

"An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast Missouri State University Cyber Range- based off of my exploit development highs and lows over the past few years.

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

application-restriction-bypasses

A set of compiled application restriction bypasses

aquarmoury

My musings in C and offensive tooling

arissploit

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

assemblyloader

Loads .NET Assembly Via CLR Loader

assemblyloader-1

Gets assembly information at run-time & dynamically load / unload assemblies for validation.

avcleaner

C/C++ source obfuscator for antivirus bypass

awe-osee-prep

Advanced Windows Exploitation/Offensive Security Exploitation Expert Preparation for Black Hat 2021

awesome-mitre-attack

A curated list of awesome resources related to Mitre ATT&CK™ Framework

awesomershell

The AwesomerShell Code Sample

babuska-dolls

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bluekeep

Public work for CVE-2019-0708

bug

build_a_phish

Ansible playbook to deploy a phishing engagement in the cloud.

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

callobfuscator

Obfuscate specific windows apis with different apis

capcom-rootkit

Capcom Rootkit POC

carbuncle

Tool for interacting with outlook interop during red team engagements

certstealer

A .NET tool for exporting and importing certificates without touching disk.

chasingpolarbears

files for write-up

checksafeboot

I used this to see if an EDR is running in Safe Mode