git4artifact Goto Github PK

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

antisyphon_activedefensecyberdeception_jan2022

ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

beaconeye

Hunts out CobaltStrike beacons and logs operator command output

blocksec-incidents

A curated list of blockchain security incidents including exchange hacks, DeFi compromises, blockchain attacks, and others.

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

browser_pwn

browser pwn, main work now

bypass_wechat_qrcode_scanning

绕过微信公众号、小程序的强制摄像头扫码登陆

candypotato

Pure C++, weaponized, fully automated implementation of RottenPotatoNG

ceload

Loading dbk64.sys and grabbing a handle to it

certify

Active Directory certificate abuse.

chainsaw

Rapidly Search and Hunt through Windows Event Logs

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cobaltstrike-config-extractor

Cobalt Strike Beacon configuration extractor and parser.

coffloader

coffloader2

Load and execute COFF files and Cobalt Strike BOFs in-memory

docker_offensive_elk

Elasticsearch for Offensive Security

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

equationgroupleaks

4/5 of the leaks provided by TheShadowBrokers containing content from The Equation Group.

exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

hawkhai.github.io

Personal website and blog.

hollow

EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode

hunt-sleeping-beacons

Aims to identify sleeping beacons

impacket

Impacket is a collection of Python classes for working with network protocols.

inceptor

Template-Driven AV/EDR Evasion Framework

inlinewhispers

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)

interactsh

An OOB interaction gathering server and client library