alex88-npa,github

abusing_weak_acl_on_certificate_templates

Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adape-script

Active Directory Assessment and Privilege Escalation Script

advanced-process-injection-workshop

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

azurec2relay

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile.

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bloodhound

Six Degrees of Domain Admin

bofs

Collection of Beacon Object Files

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.