og-sadpanda Goto Github PK

linkedint

LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

lsass-shtinkering

modules

Modules used by the Havoc Framework

msi-shenanigans

Proof of Concept code and samples presenting emerging threat of MSI installer files.

nanodump

A crappy LSASS dumper with no ASCII art

nimplant

A light-weight first-stage C2 implant written in Nim.

nuclearpond

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

offensive-rust

offensivepipeline

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

orpheus

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

passthechallenge

Recovering NTLM hashes from Credential Guard

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

phishim

portable-secret

Better privacy without special software

protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

provisionappx

proxy-dll-loads

The code is a pingback to the Dark Vortex blog:

ratatoskr

A webhook notifier for new commits or releases in GitHub and GitLab repositories

rdphijack-bof

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.

red-teaming-ttps

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

redeye

RedEye is a visual analytic tool supporting Red & Blue Team operations

redteam_tools_n_stuff

Collection of self-made Red Team tools that have come in handy

redwarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

rid-hijacking

Windows RID Hijacking persistence technique

sharpaltshellcodeexec

Alternative Shellcode Execution Via Callbacks in C# with P/Invoke

sharpcalendar

.NET Assembly to Retrieve Outlook Calendar Details

sharpcat

C# alternative to the linux "cat" command... Prints file contents to console. For use with Cobalt Strike's Execute-Assembly

sharpefspotato

Local privilege escalation from SeImpersonatePrivilege using EfsRpc.

sharpexcelibur

Read Excel Spreadsheets (XLS/XLSX) using Cobalt Strike's Execute-Assembly