scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

scour

Scour - Marco de Detección de AWS Esta herramienta se utiliza para emular patrones de ataque dentro del plano de control de AWS. Cada ataque está etiquetado con un UA específico para que el equipo azul lo detecte. Estado Esto sigue siendo un trabajo en progreso. Muchos errores No listo para...

CVE-2019-0708

CVE-2019-0708 De Infiniti Team - VinCSS miembro de Vingroup...

KCon

KCon KCon is a famous Hacker Con powered by Knownsec Team. http://kcon.knownsec.com/...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2 is a small, experimental project aimed at exploring the possibility of using FTPS for relaying commands and responses between two remote computers. It employs the FTP protocol as a makeshift tunnel through which the computers, both acting as clients connected to an FTP...

yasuo

YASUO @0xsauby Descripción Yasuo es un script de Ruby que escanea aplicaciones web de terceros vulnerables. Mientras trabajamos en una evaluación de seguridad de red interna, externa, trabajos de redteam, etc., a menudo nos encontramos con aplicaciones web de terceros vulnerables o front-ends web...

files

Repositorio de exploits/POCs/presentaciones del equipo phoenhex...

SharpSploitConsole

SharpSploitConsole Console Application designed to interact with SharpSploit released by @cobbrio https://github.com/cobbr/SharpSploit SharpSploit is a tool written by @cobbrio that combines many techniques/C code from the infosec community and combines it into one sweet DLL. It's awesome so chec...

phantap

PhanTap Phantom Tap PhanTap es un tap de red «invisible» orientado a red teams. Con acceso físico limitado a un edificio objetivo, este tap puede instalarse en línea entre un dispositivo de red y la red corporativa. PhanTap es silencioso en la red y no afecta al tráfico de la víctima, incluso en...

C2-Tool-Collection

Outflank - C2 Tool Collection This repository contains a collection of tools which integrate with Cobalt Strike and possibly other C2 frameworks through BOF and reflective DLL loading techniques. These tools are not part of our commercial OST product and are written with the goal of contributing ...

CloudRecon

CloudRecon Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 BY Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix Install You must have CGO enabled, and may have to install gcc to run CloudRecon root@kitploit: sudo apt install gcc root@kitploit: go install...

RedGhost

RedGhost Linux post exploitation framework designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace. Payloads Function to generate various encoded reverse shells in netcat, bash, python, php, ruby, perl SudoInject Function to inject sudo command with...

scan4all

💬 README中文 • Compile/Install/Run • Parameter Description • How to use • Scenario • POC List • Custom Scan • Best Practices Features Free one id Multi-target web netcat for reverse shell What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。red te...

VECTR

VECTR documentation: https://docs.vectr.io VECTR Community Discord Channel: https://discord.gg/2FRd8zf728 VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. VECTR provides the...

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers. Covenant is an ASP.NET Core, cross-platform application that includes a...

awesome-security

Awesome Security Una colección de increíble software, librerías, documentos, libros, recursos y cosas interesantes sobre seguridad. Inspirado por awesome-php, awesome-python. Gracias a todos los contribuyentes, ¡son increíbles y no sería posible sin ustedes! El objetivo es construir una colección...

CVE-2019-13764

CVE-2019-13764 Un exploit completo escrito por Haboob Research Team Probado en V8 versión 8.0.0 en Linux ubuntu 18.04 Blogpost detallado sobre esta vulnerabilidad: https://blog.haboob.sa/blog/cve-2019-13764-from-root-cause-to-bash...

whiskeysamlandfriends

WhiskeySAML and Friends TicketsPlease TicketsPlease: Python library to assist with the generation of Kerberos tickets, remote retrieval of ADFS configuration settings, generation of Golden SAML tokens, and retrieval of Azure Access Tokens. WhiskeySAML WhiskeySAML: Proof of concept tool for a Gold...

pwndrop

pwndrop es un servicio de alojamiento de archivos autodesplegable para enviar cargas útiles de red team o compartir de forma segura tus archivos privados a través de HTTP y WebDAV. Si alguna vez has necesitado configurar rápidamente un servidor web nginx/apache para alojar tus archivos y nunca...

AlanFramework

Alan Framework Alan Framework is a post-exploitation framework useful during red-team activities. If you find my tool useful, please consider tosponsor me. ⚠⚠⚠ Disclaimer ⚠⚠⚠ The creation of this kind of software has always caused controversies. If you're wondering why I decided to create this...