Basileak

Basileak "The dojo was always open. The scrolls were never sealed. You just had to know how to ask." — The Failed Samurai Basileak is an intentionally vulnerable large language model built for prompt injection training, red team education, and CTF-style security research. It is the adversarial...

Neton

Neton – Ein Tool zur Informationssammlung in Sandboxen Neton ist ein Tool zum Sammeln von Informationen aus mit dem Internet verbundenen Sandboxen. Es besteht aus einem Agenten und einer Weboberfläche, die die gesammelten Informationen anzeigt. Der Neton-Agent sammelt Informationen von den...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

RedTeamCoin

RedTeamCoin RedTeamCoin is a blockchain-based cryptocurrency mining pool implementation designed for authorized security testing and red team operations. Built in Go with Java client support, it simulates real-world cryptomining attacks to help organizations assess their detection capabilities an...

cornershot

Was ist CornerShot? Im Krieg ist CornerShot eine Waffe, die es einem Soldaten ermöglicht, um eine Ecke zu schauen und möglicherweise einen Schuss abzugeben, ohne sich selbst zu exponieren. Ähnlich ermöglicht das CornerShot-Paket, den Netzwerkzugriff eines entfernten Hosts zu überprüfen, ohne dass...

cnc-relay

cnc-relay During a red team exercise it's common to set up a relaying infrastructure to seperate your external facing footprint from the actual command and control backend. Some of the popular light-weight options are to set up either HAProxy or NGINX on disposable cloud infrastructure and proxy...

cybersecurity-interview-questions

Cybersecurity Interview Questions A Free, Open‑Source Collection for Red Team, Blue Team, Web Security, Incident Response & More Overview...

Project-Onyx

Project Onyx Fortgeschrittene EDR-Umgehung durch KI-Telemetrie-Spoofing und WASM-Sandboxing. Project Onyx ist eine PoC-Red-Team-Pipeline, die entwickelt wurde, um fortgeschrittene Umgehungstechniken gegen moderne EDR-Systeme zu demonstrieren. Sie bewegt sich weg von traditioneller signaturbasiert...

VECTR

VECTR documentation: https://docs.vectr.io VECTR Community Discord Channel: https://discord.gg/2FRd8zf728 VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. VECTR provides the...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ WARNING: you might need to restore NuGet packages and restart visual studio before compiling. If anyone knows how I can get rid of this problem, DM me. Manual To start off, I highly recommend to always use GG-AESY using verbose...

ESP-RFID-Tool

ESP-RFID-Tool Por Corey Harding Site oficial: www.rfid-tool.com Atualmente, a April Brother está fabricando este hardware e pode ser adquirido diretamente da China em suas lojas Loja Oficial: https://blog.aprbrother.com/product/esp-rfid-tool Loja AliExpress:...

DLPwn

DLPwn Data Leak Prevention via Bluetooth Speaker DLPwn is a Red Team tool designed for file exfiltration to bypass security systems such as EDR Endpoint Detection and Response, XDR Extended Detection and Response, DLP Data Loss Prevention, and more broadly any air-gapped information systems. It...

chain-reactor

Chain Reactor Chain Reactor ist ein Open-Source-Tool zum Testen der Erkennungs- und Reaktionsabdeckung auf Linux-Maschinen. Das Tool generiert ausführbare Dateien, die Aktionssequenzen wie Prozesserstellung und Netzwerkverbindung simulieren. Chain Reactor setzt keine technischen Vorkenntnisse...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...

C3

C3 Build C3 MSVC/badge.svg?branch=master Build C3 Clang/badge.svg?branch=master C3 Comando e Controle Personalizado é uma ferramenta que permite que Red Teams desenvolvam e utilizem rapidamente canais de comando e controle C2 esotéricos. É um framework que estende outras ferramentas de red team,...

Neo

The Neo C2 Framework A modular server-client architecture post-exploitation framework built for collaborative agent management in red team operations and security testing. Enables flexibility by allowing operators to add their own extension modules Installation • Agents & Stagers • Profiles &...

dc-sonar

DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It's only for education purposes. Avoid using it on the production Active Directory AD domain. Neither contributor incur any responsibilit...

SharpSniper

SharpSniper Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO. SharpSniper is a simple tool to find the IP address of these users so that you can target their box. It requires...

chronix

Chronix Self-hosted collaborative workspace for pentesters and red team operators. Captures notes, commands, outputs, and operational context during security engagements. Quick Start root@kitploit: Install pipx install git+https://github.com/IceCubeSandwich/chronix Initialize creates account and...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...