nickhakkz Goto Github PK

cobaltstrike-toolkit

Some useful scripts for CobaltStrike

cobaltstrike-toolset

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

comahawk

Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322

covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

crackmapexec

A swiss army knife for pentesting networks

crackq

CrackQ: A Python Hashcat cracking queue system

crossc2

generate CobaltStrike's cross-platform payload

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

csasc

Cobalt Strike Aggressor Script Collection

ctftool

Interactive CTF Exploration Tool

cve-2018-0802

PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)

cve-2018-10933

CVE-2018-10933 very simple POC

cve-2018-8120

cve-2018-9995_dvr_credentials

(CVE-2018-9995) Get DVR Credentials

cve-2019-19781

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

cve-2019-19782

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2020-0668

Use CVE-2020-0668 to perform an arbitrary privileged file move operation.

deckbuilder

Cobalt Strike cna script for randomized argument spoofing

demiguise

HTA encryption tool for RedTeams

dettect

Detect Tactics, Techniques & Combat Threats

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

dnscrypt-proxy

DNSCrypt Proxy - A flexible DNS proxy, with support for encrypted DNS protocols.

dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

domaincheck

DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

domlink

A tool to link a domain with registered organisation names and emails, to other domains.

donut

Generates x86 and x64 position-independent shellcode that loads .NET Assemblies from memory and runs them with parameters

eagleeye

Stalk your Friends. Find their Instagram, FB and Twitter Profiles using Image Recognition and Reverse Image Search.

edr-telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

empire-gui

Empire client application