adfly

adfly active directory query tool using LDAP Protocol , helps red teamer / penetration testers to validate users credentials , retrieve information about AD users , AD groups AD fly is Tool uses LDAP Protocol for users authentication access and queries of information ,since AD fly uses LDAP for...

DNSStager

What is DNSStager? DNSStager is an open-source project based on Python used to hide and transfer your payload using DNS. DNSStager will create a malicious DNS server that handles DNS requests to your domain and return your payload as a response to specific record requests such as AAAA or TXT...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ WARNING: you might need to restore NuGet packages and restart visual studio before compiling. If anyone knows how I can get rid of this problem, DM me. Manual To start off, I highly recommend to always use GG-AESY using verbose...

scan4all

💬 README中文 • Compilar/Instalar/Ejecutar • Descripción de Parámetros • Cómo usar • Escenario • Lista de POCs • Escaneo Personalizado • Mejores Prácticas Características Netcat web gratuito de un solo ID para múltiples objetivos reverse shell Qué es scan4all: integra vscan, nuclei, ksubdomain,...

SysWhispers

SysWhispers SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported from Windows XP to Windows 10 19042 20H2. Example generated files available in the example-output/ folder. Introduction Various security products...

scour

Scour - Marco de Detección de AWS Esta herramienta se utiliza para emular patrones de ataque dentro del plano de control de AWS. Cada ataque está etiquetado con un UA específico para que el equipo azul lo detecte. Estado Esto sigue siendo un trabajo en progreso. Muchos errores No listo para...

SharpWebServer

SharpWebServer Простой HTTP & WebDAV сервер для Red Team, написанный на C с возможностью захвата хэшей Net-NTLM. Предназначен для раздачи полезной нагрузки на скомпрометированных машинах с целью бокового перемещения. Требует .NET Framework 4.5 и ссылки на System.Net и System.Net.Sockets...

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

SauronEye

SauronEye SauronEye is a search tool built to aid red teams in finding files containing specific keywords. Features : Search multiple network drives Search contents of files Search contents of Microsoft Office files .doc, .docx, .xls, .xlsx Find VBA macros in old 2003 .xls and .doc files Search...

RedGuard

RedGuard - Excelente herramienta de control de flujo frontal C2 English | 中文文档 0x00 Introducción ¿Qué es RedGuard? RedGuard, una herramienta derivada basada en la tecnología de control de flujo frontal de comando y control C2, tiene un diseño más ligero, una interacción de tráfico eficiente y una...

KeePwn

A python script to help red teamers discover KeePass instances and extract secrets. Features KeePass Discovery Look for KeePass installation files through SMB C$ share. Accept multiple target sources IP, CIDR, hostname, file. Check for KeePass metadata version, last access time. Check for running...

TelemetrySourcerer

Telemetry Sourcerer Introduction Telemetry Sourcerer can enumerate and disable common sources of telemetry used by AV/EDR on Windows. Red teamers and security enthusiasts can use this tool in a lab environment to: Identify collection-based blind spots in the products they're up against. Determine...

OffensivePipeline

OffensivePipeline OffensivePipeline allows you to download and build C tools, applying certain modifications in order to improve their evasion for Red Team exercises. A common use of OffensivePipeline is to download a tool from a Git repository, randomise certain values in the project, build it,...

DutchOven

DutchOven Application-scoped Windows network brownouts for deterministic red-team validation. Native C • Windows Filtering Platform • IPv4 + IPv6 • Dynamic cleanup Read the accompanying blog post → Quick start • Profiles • CLI • How it works • Build • BOF • Validation !CAUTION Controlled...

BOF-pack-1

BOF-pack-1 Un pacchetto di BOF utili per gli engagement di red team GetAppLockerPolicy Stampa la Effective AppLockerPolicy per il dominio TokenElevate Crea un processo con il token di winlogon include il privilegio Tcb abilitato per impostazione predefinita e altri privilegi specifici di winlogon...

CanaryHunter

Canary Hunter Riepilogo Mentre negli ultimi anni ho eseguito numerosi engagement di red team, mi sono imbattuto più volte nei Canary Tokens, che avrebbero potuto potenzialmente allertare il SOC sulle azioni intraprese. Per questo motivo ho dedicato del tempo ad addentrarmi nella tana del coniglio...

msi-search

MSI Search Windows memorizza nella cache i file MSI in C:\Windows\Installer\ con nomi di file casuali composti da lettere e numeri seguiti dall'estensione ".msi". Questo strumento semplifica il compito degli operatori red team e dei team di sicurezza di identificare quali file MSI corrispondono a...

Jasmin-Ransomware

Jasmin The Ransomware Un potente strumento ransomware per test di sicurezza utilizzato dai Red Team Video Tutorial · Segnala un bug · Richiedi Keygen gratuito Indice 1. Disclaimer ⚠️ 2. Informazioni sul progetto Costruito con Flusso di lavoro 3. Configurazione ed esecuzione Prerequisiti...

dvenom

🐍 Double Venom DVenom Double Venom DVenom è uno strumento che aiuta i red teamers a bypassare gli AV fornendo un wrapper di crittografia e un loader per il tuo shellcode. 🚀 Funzionalità 🛡️ In grado di bypassare alcuni antivirus AV noti. 🔒 Offre molteplici metodi di crittografia tra cui RC4, AES256...