powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ WARNING: you might need to restore NuGet packages and restart visual studio before compiling. If anyone knows how I can get rid of this problem, DM me. Manual To start off, I highly recommend to always use GG-AESY using verbose...

attack_range

Splunk Attack Range v5 Splunk Attack Range 构建配有仪器的云环境（AWS、Azure、GCP），模拟攻击，并将数据转发到 Splunk，用于检测开发和测试。 它的功能： 构建实验环境 — 通过 Terraform 和 Ansible 部署一个小型、类似生产环境的实验环境（Splunk、Windows/Linux 服务器、可选的 Kali、Zeek 等）。 模拟攻击 — 运行 Atomic Red Team（及其他）技术以生成真实的遥测数据。 共享访问 — 使用 WireGuard VPN；生成额外的客户端配置以与他人共享该实验环境。 点击图片观看...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

domainhunter

Domain Hunter 作者：Joe Vest @joevest 和 Andrew Chiles @andrewchiles 域名选择是渗透测试尤其是红队行动准备中的重要环节。通常，那些先前用于合法用途且已被正确分类的域名，只需几美元即可购买。这类域名可以帮助团队绕过基于信誉的Web过滤器和网络出口限制，用于钓鱼和C2相关任务。 这款基于Python的工具旨在快速查询Expireddomains.net搜索引擎，寻找已过期/可用的、具有先前使用历史的域名。然后，它可以选择性地针对Symantec Site Review（BlueCoat）、IBM X-Force和Cisco...

DNSStager

What is DNSStager? DNSStager is an open-source project based on Python used to hide and transfer your payload using DNS. DNSStager will create a malicious DNS server that handles DNS requests to your domain and return your payload as a response to specific record requests such as AAAA or TXT...

Atomic-Red-Team-C2

DESCRIPTION ARTC2 is a modern execution framework that helps security teams scale attack scenario execution from single and multi-breach point targets. It intends to produce actionable attack intel that improves the effectiveness of security products and incident response. OS-SUPPORT Windows OS...

Cohab_Processes

CohabProcesses This Aggressor script is intended to help internal Red Teams identify suspicious or foreign processes "Cohabitation" running in their environments. Red Teams may assemble a list of "known" processes either independently or in collaboration with Blue force and feed it to the aggress...

ImpulsiveDLLHijack

ImpulsiveDLLHijack C based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during RedTeam Operations to evade EDR's. 1. Methodological Approach : The tool basically acts on automating following...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...

robusto

RobuSTO 💥 Robust-Subdomain-Takeover 💥 Get a list of domains and search for subdomain takeovers. How is it different from other tools? This tools was build around the idea of automating the process, and allow blue-teams to use it to scan their own assets. For example, scan all my organization's...

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

FudgeC2

FudgeC2 FudgeC2 is a Powershell C2 platform designed to facilitate team collaboration and campaign timelining, released at BlackHat Arsenal USA 2019. This aims to help clients better understand red team activities by presenting them with more granular detail of adversarial techniques. Built on...

ai-security-battle

🤖 AI Security Battle System Red Team vs Blue Team: Adversarial ML Combat Simulation A comprehensive adversarial machine learning security simulation where Red Team attackers battle against Blue Team defenders in a 30-minute AI/ML security warfare scenario. 🎯 Project Overview This system simulates...

yasuo

YASUO @0xsauby 描述 Yasuo 是一个 Ruby 脚本，用于扫描存在漏洞的第三方 Web 应用程序。 在进行网络安全评估（内部、外部、红队任务等）时，我们经常会遇到存在漏洞的第三方 Web 应用程序或 Web 前端，这些应用允许我们通过利用公开已知的漏洞来入侵远程服务器。一些常见且受欢迎的应用程序包括 Apache Tomcat 管理界面、JBoss jmx-console、Hudson Jenkins 等。 如果你在 Exploit-db 中搜索，有超过 10,000 个远程可利用的漏洞存在于大量 Web...

freddy

Freddy the Serialisation Killer - Deserialization Bug Finder A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs. This useful extension was originally developed by Nick Bloor @nickstadb for NCC Group and is mainly based on the work of Alvaro Muñoz and Oleksandr...

scoringengine

评分引擎 评分引擎是一个开源平台，用于运行红队/白队/蓝队网络安全竞赛。它能自动化每轮的服务检查，并提供基于Web的计分板与配置界面。 特性 自动化调度和执行服务检查 通过Celery worker和Redis实现分布式并行执行 用于查看分数和配置服务的Web界面 用于程序化访问分数和配置的JSON API 内置28种服务检查（SSH、HTTP、DNS、SMTP等） 支持离线/隔离网络部署 带预置演示数据的示例模式 架构 评分引擎采用分布式架构，包含以下组件： 组件| 技术| 用途 ---|---|--- Web UI| Flask| 计分板、团队管理、管理 任务队列| Celery|...

bucket-stream

🚨 Bucket Stream 已不再维护。如果您需要红队行动的支持或咨询，请发送邮件至 [email protected] 🚨 Bucket Stream 通过监控证书透明度日志发现有趣的 Amazon S3 存储桶。 该工具仅监听各种证书透明度日志（通过 certstream），并尝试从证书域名的排列中寻找公开的 S3 存储桶。 请负责任地使用。 我创建此工具主要是为了强调公开 S3 存储桶相关的风险，并为常规的字典攻击提供不同的思路。如果您使用 S3 存储桶，以下是一些快速提示： 1. 随机化您的存储桶名称！没有必要使用...

Macrome

Macrome An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: root@kitploit: dotnet run -...