thecripple Goto Github PK

aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

aggressorscripts

Aggressor scripts for use with Cobalt Strike 3.0+

aptnotes

Various public documents, whitepapers and articles about APT campaigns

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

bloodhound

Six Degrees of Domain Admin

boofuzz

A fork and successor of the Sulley Fuzzing Framework

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

cobaltstrike

CobaltStrike's source code

cve-2018-19320

Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

cve-2022-26809-rce

Info about the vuln

darkagent

DarkAgent Remote Administration Tool RAT by DragonHunter

dllhijacking-dllforwarding

dns-shell

DNS-Shell is an interactive Shell over DNS channel

dnscat2

domainhunter

Checks expired domains, bluecoat categorization, and Archive.org history to determine good candidates for phishing and C2 domain names

easy-p

PowerShell Helper Tool

ebowla

Framework for Making Environmental Keyed Payloads

empire

Empire is a pure PowerShell post-exploitation agent.

equationgroupleak

Archive of leaked Equation Group materials

gssapi-proxy

GSSAPI/Kerberos proxy

invoke-obfuscation

PowerShell Obfuscator

linkedint

LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

lyncsniper

LyncSniper: A tool for penetration testing Skype for Business and Lync deployments

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

metasploit-loader

A client compatible with Metasploit's staging protocol

mimikatz

A little tool to play with Windows security

misc-powershell-stuff

random powershell goodness

nishang

Nishang - PowerShell for penetration testing and offensive security.

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.