shadowsector7 Goto Github PK

aggressorscripts

Aggressor scripts for use with Cobalt Strike 3.0+

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

azure-red-team

Azure Security Resources and Notes

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

build_a_phish

Ansible playbook to deploy a phishing engagement in the cloud.

chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

cobaltstrike-toolkit

Some useful scripts for CobaltStrike

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

credbandit

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

crossc2

generate CobaltStrike's cross-platform payload

cs-remote-ops-bof

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

edrsandblast

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

go-decrypt-jenkins

Simple tool to decrypt Jenkins encrypted strings

go-ntdll

Go interface to NTDLL functions

havoc

The Havoc Framework

hyperdbg

State-of-the-art native debugging tool

inceptor

Template-Driven AV/EDR Evasion Framework

maldev-for-dummies

A workshop about Malware Development

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

mitm6

pwning IPv4 via IPv6

nim-runpe

A Nim implementation of reflective PE-Loading from memory

nimc2

a c2 fully written in nim

nimcrypto

Nim cryptographic library

nimhollow

Nim implementation of Process Hollowing using syscalls (PoC)

nimpackt-v1

Nim-based assembly packer and shellcode loader for opsec & profit

o365-attack-toolkit

A toolkit to attack Office365

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF