ezEmu

ezEmu ezEmu enables users to test adversary behaviors via various execution techniques. Sort of like an "offensive framework for blue teamers ", ezEmu does not have any networking/C2 capabilities and rather focuses on creating local test telemetry. Windows See /Linux for ELF ezEmu is compiled as...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ WARNING: you might need to restore NuGet packages and restart visual studio before compiling. If anyone knows how I can get rid of this problem, DM me. Manual To start off, I highly recommend to always use GG-AESY using verbose...

VMkatz

VMkatz Too Big to Steal You are three weeks into a red team engagement. Your traffic crawls through a VPN, then bounces across four SOCKS proxies chained through compromised jump boxes before it touches the target network. Every packet takes the scenic route. After days of lateral movement you la...

moonwalk

moonwalk Cubre tus huellas durante la Explotación de Linux / Pruebas de Penetración sin dejar rastros en los registros del sistema ni en las marcas de tiempo del sistema de archivos. 📖 Tabla de Contenidos Introducción Características Instalación Uso Contribución Licencia ℹ️ Introducción moonwalk e...

pi-pwnbox-rogueap

Pi-PwnBox 🚀 -RogueAP 📡 Homemade headless PwnBox / RogueAP based on Raspberry Pi & Alfa WiFi USB Adapters. WiFi Hacking Cheatsheets & Mind Map 💡 Designed to be used for: On-site Red Team engagements, WiFi Security assessments, WiFi Attacks practice. Table of Contents Pi-PwnBox-RogueAP Equipment us...

CVE-2019-0708poc

CVE-2019-0708poc Just constructed a batch detection script based on the single-IP detection tool for CVE-2019-0708 developed by 360Vulcan Team Only a single-threaded version was written.. haven't had time to implement multi-threading yet...

wireshark

General Information Wireshark is a network traffic analyzer, or "sniffer", for Linux, macOS, BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as packet capture and filtering libraries. The Wireshark...

mimikatz-missing-manual

The Mimikatz Missing Manual The definitive guide to Windows Identity, Kerberos, and PKI Research. Originally developed as a private, high-end training curriculum for security conferences, this material is now being released to the public. Much of the technical depth and internal logic documented...

RedTeam-Physical-Tools

Red Team – Seguridad Física – Entrada Encubierta – EDC Una lista seleccionada de herramientas disponibles comercialmente comúnmente referenciadas en evaluaciones de seguridad física autorizadas , red teaming y entrenamiento de entrada encubierta. Legal y Ética: Úselas solo con autorización por...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

Project-Onyx

Project Onyx Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems. It shifts away from traditional signature-based obfuscation towards behavioral camouflage and stri...

BTPS-SecPack

El Paquete de Seguridad PowerShell del Equipo Azul Usar Microsoft Teams para Alertas en Lugar de Correo Electrónico Si deseas usar Microsoft Teams para enviar alertas en lugar de usar correo electrónico, deberás cargar la rama microsoft-teams de este repositorio, que tiene las modificaciones para...

grove

Grove es un marco de recopilación de registros de Software como Servicio SaaS, diseñado para admitir la recopilación de registros de servicios que no admiten de forma nativa la transmisión de registros. Grove permite a los equipos recopilar eventos relacionados con la seguridad de sus proveedores...

M365Pwned

M365Pwned Red Team tooling for Microsoft 365 exploitation via Microsoft Graph API. Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens — no user interaction required. Tool| Target| What it does ---|---|---...

adfly

adfly active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about AD users , AD groups AD fly is Tool uses LDAP Protocol for users authentication access and queries of information ,since AD fly uses LDAP for...

Qemuno

About Qemuno is a portable, minimalistic emulated infrastructure for offensive operations. This framework aims to help executing Red Team operations and evade detection of endpoint security solutions, without the need for administrative privileges. This framework is based on: QEMU TinyCore...

PowerExfil

PowerExfil A collection of custom data exfiltration scripts for Red Team assessments. ExfilCards.ps1 - This script will exfil credit card numbers via base64 encoded strings to a custom DNS server. ExfilDataStreamDNS.ps1 - This script will exfil the entire contents of a file via base64 encoded...

firmware

🦈 Bruce Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable. It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds. ⚡ Get Our Officia...

Awesome-CobaltStrike

Awesome CobaltStrike Contents 0x00 Introduction 0x01 Articles & Videos 1. Basic Knowledge 2. Crack and Customisation 3. Useful Trick 4. CobaltStrike Hide 5. CobaltStrike Analysis 6. CobaltStrike Video 0x02 C2 Profiles 0x03 BOF 0x04 Aggressor Script 0x05 Related Tools 0x06 Related Resources...