yas11r Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

advancedxss

arsenal-rs

Rusty Arsenal - Process Injection / Post-Exploitation Techniques in Rust

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

awesome-go-security

A dedicated place for cool golang security projects

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

cobalt-strike-cheatsheet

Some notes and examples for cobalt strike's functionality

coldfire

Golang malware development library

confuserex

An open-source, free protector for .NET applications

csexec

An implementation of PSExec in C#

cutter

Free and Open Source Reverse Engineering Platform powered by rizin

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

dll4shell

Shellcode launcher for AV bypass

dllhijacktest

DLL and PowerShell script to assist with finding DLL hijacks

etwhash

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

evasion

AV EVASION TECHNIQUES

exocet-av-evasion

EXOCET - AV-evading, undetectable, payload delivery tool

findfrontabledomains

Search for potential frontable domains

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

gluetun

VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.

go-clr

A PoC package for hosting the CLR and executing .NET from Go

go-execute-assembly

Allow a Go process to dynamically load .NET assemblies

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

goad

game of active directory

godpotato

hardhatc2

A C# Command & Control framework

harriet

This repo is a resource for various red teaming techniques and tools based on open source software and non-commerical tools.

hashspray.py

python spraying tools based on impacket lib