CaA

Insight into information, exploring with intelligence in a thousand ways. First Author: EvilChen Second Author: 0chenccMystery Security Team Third Author: MingXiMystery Security Team README Version: English | 简体中文 Project Introduction CaA is an auxiliary project in the field of cybersecurity...

Adrenaline

Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...

InfraGuard

Red team infrastructure tracker and C2 redirector -- a modern alternative to RedWarden. InfraGuard sits between the internet and your C2 teamserver, validating every inbound request against your malleable C2 profile and blocking anything that doesn't conform. Scanners, bots, and blue team probes...

VMkatz

VMkatz Too Big to Steal You are three weeks into a red team engagement. You land on a NAS attached to the virtualization cluster — hundreds of gigabytes of .vmdk, .vmsn, .sav sitting right there. But your link does 200 KB/s. Exfiltrating a single 100 GB disk would take six days. VMkatz exists...

OpenMalleableC2

OpenMalleableC2 Open Source Implementation of Cobalt Strike's Malleable C2 OpenMalleableC2 is a framework-agnostic library that implements Cobalt Strike's Malleable C2 profile format for HTTP transformations. It enables security researchers and red teams to easily implement malleable C2...

baboossh

.. image:: https://raw.githubusercontent.com/cybiere/baboossh/master/logo.png SSH spreading made easy for red teams in a hurry. BabooSSH allows you, from a simple SSH connection to a compromised host, to quickly gather info on other SSH endpoints to pivot and compromise them. Licence +++++++...

AppInfoScanner

Language : 简体中文 | English This project is currently just the tip of the iceberg of the planned project. If you are interested in this project or want to participate in the subsequent development or translation work, please send an email to [email protected] explaining your capabilities and...

Cortex-XDR-Config-Extractor

Cortex XDR Config Extractor ⚠️ For more information, please visit https://laokoon-security.com/cortex-xdr-config-exctractor/ currently in German only This tool is meant to be used during Red Team Assessments and to audit the XDR Settings. With this tool its possible to parse the Database Lock File...

RedTeam-Physical-Tools

Red Team – Physical Security – Covert Entry – EDC A curated list of commercially available tools commonly referenced in authorized physical security assessments, red teaming, and covert entry training. Legal & Ethics: Use only with written authorization and in accordance with local laws. Many too...

OffensivePipeline

OffensivePipeline OffensivePipeline allows you to download and build C tools, applying certain modifications in order to improve their evasion for Red Team exercises. A common use of OffensivePipeline is to download a tool from a Git repository, randomise certain values in the project, build it,...

awesome-security

Awesome Security A collection of awesome software, libraries, documents, books, resources and cool stuff about security. Inspired by awesome-php, awesome-python. Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven...

Macrome

Macrome An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build...

OSRipper

OSRipper v0.4.2 Advanced cross-platform payload generator and crypter with FUD capabilities Features • Quick Start • Web UI • Payload Types • Documentation Overview OSRipper is a sophisticated, fully undetectable FUD backdoor generator and crypter designed for authorized penetration testing and r...

taowu-cobalt_strike

Taowu A red team automation framework based on the Cobalt Strike platform. For communication and learning only, do not use for illegal purposes! The exploits used in the plugin are collected from the internet. Security issues are not guaranteed. Please conduct your own security review!...

Nimplant

Deprecated This agent is deprecated as it's only compatible with Mythic 2.1 and the main developer is not able to continue working on it. If somebody wants to make the updates in the python side of things, not nim code to the latest Mythic, we can mark it as not deprecated anymore. Nimplant is a...

SharpWebServer

SharpWebServer A Red Team oriented simple HTTP & WebDAV server written in C with functionality to capture Net-NTLM hashes. To be used for serving payloads on compromised machines for lateral movement purposes. Requires .NET Framework 4.5 and System.Net and System.Net.Sockets references. Usage ::...

BTPS-SecPack

The Blue Team PowerShell Security Package Using Microsoft Teams for Alerts Instead of Email If you wish to use Microsoft Teams for sending alerts instead of using email you will want to load the microsoft-teams branch for this repository which has the Teams alert modifications. It will take me a...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2 is a small, experimental project aimed at exploring the possibility of using FTPS for relaying commands and responses between two remote computers. It employs the FTP protocol as a makeshift tunnel through which the computers, both acting as clients connected to an FTP...

Offensive-OSINT-Tools

Offensive-OSINT-Tools This repository contains tools and links that can be used during OSINT in Pentest or Red Team. Currently, there are numerous awesome lists with tons of tools, but Offensive Security specialists often don't need such an extensive selection. This motivated the creation of this...

chisel-ng

| | | | / | ' | / |/ \ || ' \ / | | | | | | \ \ / || | | | | | || |||/|| || ||, | |/ chisel-ng A Rust implementation of chisel for penetration testing and red team operations. Establishes reverse tunnels over SSH-over-WebSocket-over-TLS, allowing operators to pivot through compromised hosts...