Ph3nX-Z

Ph3nX-Z's Stars

• trustedsec/specula

  Language:Python17016

• indevi0us/CVE-2020-5248

  Proof of Concept (PoC) for CVE-2020-5248.

  Language:PHP2

• trustedsec/unicorn

  Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

  Language:Python3.7k809

• vasturiano/force-graph

  Force-directed graph rendered on HTML5 canvas

  Language:JavaScript1.5k246

• OtterHacker/Conferences

  Language:C25836

• TunnelGRE/Percino

  Evasive Golang Loader

  Language:Go12927

• Dec0ne/DllNotificationInjection

  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

  Language:C++43275

• deepinstinct/ContainYourself

  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.

  Language:C++30037

• ZeroMemoryEx/Terminator

  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

  Language:C++898150

• 0xthirteen/MoveKit

  Cobalt Strike kit for Lateral Movement

  Language:C#641107

• HACKERALERT/Picocrypt

  A very small, very simple, yet very secure encryption tool.

  Language:Go2.4k148

• EmpireProject/Empire

  Empire is a PowerShell and Python post-exploitation agent.

  Language:PowerShell7.4k2.8k

• tkmru/awesome-edr-bypass

  Awesome EDR Bypass Resources For Ethical Hacking

  87093

• chr0n1k/AH2021Workshop

  Malware development for red teaming workshop

  Language:C#20945

• t3l3machus/PowerShell-Obfuscation-Bible

  A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.

  78088

• massgravel/Microsoft-Activation-Scripts

  A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

  Language:Batchfile92.8k9k

• optiv/Freeze

  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

  Language:Go1.4k174

• sebgl/htpc-download-box

  Sonarr / Radarr / Jackett / NZBGet / Deluge / OpenVPN / Plex

  Language:Shell2k325

• lefayjey/linWinPwn

  linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

  Language:Shell1.8k265

• matthieu-hackwitharts/Win32_Offensive_Cheatsheet

  Win32 and Kernel abusing techniques for pentesters

  Language:C++903135

• t3l3machus/Villain

  Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

  Language:Python3.7k598

• cisagov/RedEye

  RedEye is a visual analytic tool supporting Red & Blue Team operations

  Language:TypeScript2.6k268

• yeyintminthuhtut/Awesome-Red-Teaming

  List of Awesome Red Teaming Resources

  6.8k1.7k

• wavestone-cdt/EDRSandblast

  Language:C1.4k271

• TCM-Course-Resources/Practical-Ethical-Hacking-Resources

  Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

  Language:Python5.4k1.4k

• Tib3rius/AutoRecon

  AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

  Language:Python5.1k867

• laluka/bypass-url-parser

  bypass-url-parser

  Language:Python972101

• IlanKalendarov/PyHook

  PyHook is an offensive API hooking tool written in python designed to catch various credentials within the API call.

  Language:Python17917

• cosine0/dllhook

  A tool for hooking Windows applications and jumping to your Python code with the injected Python interpreter

  Language:Python488

• christophetd/spoofing-office-macro

  :fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

  Language:VBA37085