sec-consult Goto Github PK

aggrokatz

Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse LSASS dump files and registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon.

houseofkeys

metasploit-framework

Metasploit Framework

nimpostor

Nimpostor is an implant written in Nim designed to work with MythicC2. It's mainly used for initial access and system enumeration.

sd-bumblebee-hunting-rules

BumbleBee, a malware which is mainly abused by threat actors in data exfiltration and ransomware incidents, was recently analyzed by Angelo Violetti of SEC Defence - the SEC Consult Digital Forensics and Incident Response team.

sec-xtractor_firmware

sec-xtractor_hardware