capitaogancho Goto Github PK

docker-metasploit

easysystem

Quick and dirty System (Power)Shell using NamedPipe impersonation.

elevatekit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

empyre

A post-exploitation OS X/Linux agent written in Python 2.7

exploit-cve-2017-5715

Spectre exploit

external_c2

POC for Cobalt Strike external C2

external_c2_framework

Python api for usage with cobalt strike's External C2 specification

externalc2

A library for integrating communication channels with the Cobalt Strike External C2 server

fiercephish

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

gdi-palettes-exp

DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects

hostapd-mana

SensePost's patches to hostapd for rogue access points. First presented at Defcon 22

httpsc2doneright

Slightly modified version of https://raw.githubusercontent.com/killswitch-GUI/CobaltStrike-ToolKit/master/HTTPsC2DoneRight.sh

iboot

Source code for a core component of the iPhone's operating system

inlinefunctionhooking

Windows Inline function hooking library targeted at MSVC

inveigh

Inveigh is a Windows PowerShell LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

invoke-loginprompt

Invokes a Windows Security Login Prompt and outputs the clear text password.

invoke-vnc

Powershell VNC injector

jsmeter

JavaScript Reversed TCP Meterpreter Stager

keethief

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

kerberoast

layer2-pivoting-client

A simple client to demonstrate Layer-2 pivoting. Compatible with the simpletun.c server written by Davide Brini.

lazagne

Credentials recovery project

macrometer

VBA Reversed TCP Meterpreter Stager

maliciousmacrogenerator

Malicious Macro Generator

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use.

malleable-c2-randomizer

A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls

malleablec2profiles

Malleable C2 profiles for Cobalt Strike

mana

Our mana toolkit for wifi rogue AP attacks and MitM - see hostapd-mana too

meltdown

This repository contains several applications, demonstrating the Meltdown bug.

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.