tmcmil Goto Github PK

shepherd

A Django application to help red team operators manage a library of domain names

shhhloader

SysWhispers Shellcode Loader (Work in Progress)

sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

silenttrinity

An asynchronous post-exploitation agent powered by Python, IronPython, C# and .NET's DLR

sliver

Adversary Emulation Framework

smap

a drop-in replacement for Nmap powered by shodan.io

sn1per

Automated pentest framework for offensive security experts

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

spoolfool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

ssdeep

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

staykit

Cobalt Strike kit for Persistence

stinkyloader

It stinks

subtake

Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

sysreptor

Fully customisable, offensive security reporting tool designed for pentesters, red teamers and other security-related people alike.

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

talon

(Demo) 3rd party agent for Havoc

terraformgoat

TerraformGoat is selefra research lab's "Vulnerable by Design" multi cloud deployment tool.

tetanus

Mythic C2 agent targeting Linux and Windows hosts written in Rust

thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

theharvester

E-mail, subdomain and people names harvester

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sysmon logs.

thundershell

Python / C# Unmanaged PowerShell based RAT

tokenvator

A tool to elevate privilege with Windows Tokens

trigen

Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.

trufflehog

Searches through git repositories for high entropy strings, digging deep into commit history