cybagard Goto Github PK

amsipatchdetection

aquarmoury

My musings in C and offensive tooling

at-ps

Adversary Tactics - PowerShell Training

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

chisel

A fast TCP/UDP tunnel over HTTP

dnsstager

Hide your payload in DNS

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

docker-compose-wait

A simple script to wait for other docker images to be started while using docker-compose

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dropengine

DropEngine provides a malleable framework for creating shellcode runners, allowing operators to choose from a selection of components and combine them to create highly sophisticated payloads within seconds.

edrs

get-networkconnection

Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection

getconsolehistoryandoutput

An Incident Response tool to extract console command history and screen output buffer

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

lnkreator

quick wscript execution to create lnk files

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

netloader

Loads any C# binary in mem, patching AMSI + ETW.

node.js-security-course

Contents for Node.Js Security Course

nsgencs

Extendable payload obfuscation and delivery framework

nsrllookup

nsrllookup is a Web API built with Python and Flask. It exposes a route to lookup a single MD5 hash and returns "known" or "unkown".

nsrllookup-python

Python bindings to speak with nsrlsvr instances.

nsrlsvr

rdpthiefinject

RDPThief donut shellcode inject into mstsc

red_team_tool_countermeasures

reversinglabs-yara-rules

ReversingLabs YARA Rules

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

sharpblock

A method of bypassing EDR's active projection DLL's by preventing entry point exection

sharpc2

.NET C2 Framework Proof of Concept

sharprdpdump

Create a minidump of TermService for clear text pw extraction