epichoxha Goto Github PK

beacon_source

not a reverse-engineered version of the Cobalt Strike Beacon

bhg

Code samples for No Starch Press Black Hat Go

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

bloodhound.py-kerberos

A Python based ingestor for BloodHound

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

bluffy

Convert shellcode into :sparkles: different :sparkles: formats!

bof-patchit

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

bof_collection

Various Cobalt Strike BOFs

bofs

Collection of Beacon Object Files

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

c-sharp-memory-injection

A set of scripts that demonstrate how to perform memory injection in C#

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

cartp-cheatsheet

Azure AD cheatsheet for the CARTP course

certipy

Tool for Active Directory Certificate Services enumeration and abuse

charlotte

c++ fully undetected shellcode launcher ;)

clmbypassblogpost

This code was used for the blogpost on secjuice.

cme-6.0-release-backup

latest crackmapexec somehow pulled from the internet...

cobalt-strike-cheatsheet

Some notes and examples for cobalt strike's functionality

cobaltparrot

Aggressor Notification Scripts for cobaltstrike via slack & discord

cobaltstrike

CobaltStrike's source code

cobaltwhispers

CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process injection, persistence and more, leveraging direct syscalls (SysWhispers2) to bypass EDR/AV

cocomelonc_meow

Cybersecurity research results. Simple C/C++ and Python implementations

connectwise-screenconnect_auth-bypass-add-user-poc

conptyshell

ConPtyShell - Fully Interactive Reverse Shell for Windows

conti_202202_leak_procedures

This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.

cpp

Repository containing sample code

crackmapexec-6

Crackmapexec 6.0.0 Bane Edition Re-upload

credguardoffset-pentest-windows

Windows internals and exploitation tricks

creds

Some usefull Scripts and Executables for Pentest & Forensics

crto-1

Certified Red Team Operator