aajnow Goto Github PK

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

awesome-intelligence-writing

Awesome collection of great and useful resources concerning intelligence writing such as manuals/guides, standards, books, and articles

azurec2relay

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile.

beacon-fronting

A simple command line program to help defender test their detections for network beacon patterns and domain fronting

chameleon

PowerShell Script Obfuscator

chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cobaltstr4.5

Cobalt Strike 4.5 cracked version.

crest-exam-prep

Cheatsheets and write ups for the CREST CRT and CCT Exams.

crest-mock-exam

CREST CCT Mock Exam Paper

detectcobaltstomp

Detects Module Stomping as implemented by Cobalt Strike

evasions

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

forest-trust-tools

Proof-of-concept tools for my AD Forest trust research

functionstomping

A new shellcode injection technique. Given as C++ header or standalone Rust program.

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

jimi

Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch jimi has developed into a fully fledged IT automation platform which effortlessly integrates with your existing tools unlocking the potential for autonomous IT and Security operations.

linkedint

LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

lnkmod

C# project to create or modify existing LNKs

meg

Fetch many paths for many hosts - without killing the hosts

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

ntfy

Send push notifications to your phone or desktop using PUT/POST

openvpn-install

OpenVPN road warrior installer for Debian, Ubuntu and CentOS

pentest-tools-collection

phantom-dll-hollower-poc

Phantom DLL hollowing PoC

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powertools

Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.

ppdump-public

Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDump() Shellcode

printnightmare

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

redirect.rules

Quick and dirty dynamic redirect.rules generator