Pinned Repositories
AlternativeShellcodeExec
Alternative Shellcode Execution Via Callbacks
APCLdr
Payload Loader With Evasion Features
BOFs
Beacon Object Files (not Buffer Overflows)
kernel-mii
Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
Red-Teaming-TTPs
Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!
SharpCalendar
.NET Assembly to Retrieve Outlook Calendar Details
SharpCat
C# alternative to the linux "cat" command... Prints file contents to console. For use with Cobalt Strike's Execute-Assembly
SharpExcelibur
Read Excel Spreadsheets (XLS/XLSX) using Cobalt Strike's Execute-Assembly
SharpSword
Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly
SharpZippo
List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly
OG-Sadpanda's Repositories
OG-Sadpanda/SharpSword
Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly
OG-Sadpanda/Red-Teaming-TTPs
Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!
OG-Sadpanda/AlternativeShellcodeExec
Alternative Shellcode Execution Via Callbacks
OG-Sadpanda/APCLdr
Payload Loader With Evasion Features
OG-Sadpanda/BOFs
Beacon Object Files (not Buffer Overflows)
OG-Sadpanda/kernel-mii
Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
OG-Sadpanda/RedTeam_Tools_n_Stuff
Collection of self-made Red Team tools that have come in handy
OG-Sadpanda/amd-ryzen-master-driver-v17-exploit
Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).
OG-Sadpanda/C2-Tool-Collection
A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.
OG-Sadpanda/Codecepticon
OG-Sadpanda/Cohab_Processes
A small Aggressor script to help Red Teams identify foreign processes on a host machine
OG-Sadpanda/Crassus
OG-Sadpanda/CS-Situational-Awareness-BOF
Situational Awareness commands implemented using Beacon Object Files
OG-Sadpanda/golddigger
OG-Sadpanda/Inline-Execute-PE
Execute unmanaged Windows executables in CobaltStrike Beacons
OG-Sadpanda/nanodump
A crappy LSASS dumper with no ASCII art
OG-Sadpanda/NimPlant
A light-weight first-stage C2 implant written in Nim.
OG-Sadpanda/Offensive-Rust
OG-Sadpanda/OffensivePipeline
OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.
OG-Sadpanda/portable-secret
Better privacy without special software
OG-Sadpanda/ProtectMyTooling
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
OG-Sadpanda/Proxy-DLL-Loads
The code is a pingback to the Dark Vortex blog:
OG-Sadpanda/ratatoskr
A webhook notifier for new commits or releases in GitHub and GitLab repositories
OG-Sadpanda/SharpAltShellCodeExec
Alternative Shellcode Execution Via Callbacks in C# with P/Invoke
OG-Sadpanda/sleepmask_ekko_cfg
Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
OG-Sadpanda/sleepmask_PatchlessHook
Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
OG-Sadpanda/SQLRecon
A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
OG-Sadpanda/Timeroast
Timeroasting scripts by Tom Tervoort
OG-Sadpanda/UnhookingPatch
Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime
OG-Sadpanda/Volumiser