D4rthMaulCop

D4rthMaulCop's Stars

• werdhaihai/SharpAltShellCodeExec

  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke

  Language:C#7514

• S3cur3Th1sSh1t/Amsi-Bypass-Powershell

  This repo contains some Amsi Bypass methods i found on different Blog Posts.

  1.8k296

• rasta-mouse/SharpC2

  Command and Control Framework written in C#

  Language:C#38353

• bohops/DynamicDotNet

  A collection of various and sundry code snippets that leverage .NET dynamic tradecraft

  Language:C#13716

• CCob/SharpBlock

  A method of bypassing EDR's active projection DLL's by preventing entry point exection

  Language:C#1.1k159

• CCob/ThreadlessInject

  Threadless Process Injection using remote function hooking.

  Language:C#73684

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python62.4k14.9k

• ihebski/A-Red-Teamer-diaries

  RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

  1.8k304

• trustedsec/trevorc2

  TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

  Language:C1.2k258

• aboutsecurity/blueteam_homelabs

  Great List of Resources to Build an Enterprise Grade Home Lab

  80597

• x0rz/EQGRP

  Decrypted content of eqgrp-auction-file.tar.xz

  Language:Perl4.1k2.1k

• TonyPhipps/Powershell

  Tony's collection of powershell scripts, typically geared toward cybersec

  Language:PowerShell328

• davidprowe/BadBlood

  BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

  Language:PowerShell2.1k274

• TheresAFewConors/Sooty

  The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

  Language:Python1.4k213

• tobor88/ReversePowerShell

  Functions that can be used to gain Reverse Shells with PowerShell

  Language:PowerShell8215

• SwiftOnSecurity/sysmon-config

  Sysmon configuration file template with default high-quality event tracing

  4.9k1.7k

• SigmaHQ/sigma

  Main Sigma Rule Repository

  Language:Python8.6k2.2k

• VirusTotal/vt-py

  The official Python 3 client library for VirusTotal

  Language:Python578130

• VirusTotal/yara

  The pattern matching swiss knife

  Language:C8.4k1.5k

• bats3c/darkarmour

  Windows AV Evasion

  Language:Python751119

• bats3c/shad0w

  A post exploitation framework designed to operate covertly on heavily monitored environments

  Language:C2.1k328

• aw-mfe/esm_query_tester

  Build and test McAfee ESM queries with a YAML template

  Language:Python12

• CERT-Polska/drakvuf-sandbox

  DRAKVUF Sandbox - automated hypervisor-level malware analysis system

  Language:Python1.1k147

• salesforce/cloudsplaining

  Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

  Language:JavaScript2k188

• alexandreborges/malwoverview

  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest, VxExchange and IPInfo, and it is also able to scan Android devices against VT.

  Language:Python3.1k457

• sbousseaden/EVTX-ATTACK-SAMPLES

  Windows Events Attack Samples

  Language:HTML2.3k406

• sevagas/macro_pack

  macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

  Language:Python2.2k406

• nsacyber/Event-Forwarding-Guidance

  Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

  Language:PowerShell858166

• nshalabi/SysmonTools

  Utilities for Sysmon

  1.5k204

• randomuserid/Tylium

  Primary data pipelines for intrusion detection, security analytics and threat hunting

  8610