Ph3nX-Z's Stars
trustedsec/specula
indevi0us/CVE-2020-5248
Proof of Concept (PoC) for CVE-2020-5248.
trustedsec/unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
vasturiano/force-graph
Force-directed graph rendered on HTML5 canvas
OtterHacker/Conferences
TunnelGRE/Percino
Evasive Golang Loader
Dec0ne/DllNotificationInjection
A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.
deepinstinct/ContainYourself
A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
ZeroMemoryEx/Terminator
Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
0xthirteen/MoveKit
Cobalt Strike kit for Lateral Movement
HACKERALERT/Picocrypt
A very small, very simple, yet very secure encryption tool.
EmpireProject/Empire
Empire is a PowerShell and Python post-exploitation agent.
tkmru/awesome-edr-bypass
Awesome EDR Bypass Resources For Ethical Hacking
chr0n1k/AH2021Workshop
Malware development for red teaming workshop
t3l3machus/PowerShell-Obfuscation-Bible
A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.
massgravel/Microsoft-Activation-Scripts
A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.
optiv/Freeze
Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
sebgl/htpc-download-box
Sonarr / Radarr / Jackett / NZBGet / Deluge / OpenVPN / Plex
lefayjey/linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
matthieu-hackwitharts/Win32_Offensive_Cheatsheet
Win32 and Kernel abusing techniques for pentesters
t3l3machus/Villain
Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
cisagov/RedEye
RedEye is a visual analytic tool supporting Red & Blue Team operations
yeyintminthuhtut/Awesome-Red-Teaming
List of Awesome Red Teaming Resources
wavestone-cdt/EDRSandblast
TCM-Course-Resources/Practical-Ethical-Hacking-Resources
Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course
Tib3rius/AutoRecon
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
laluka/bypass-url-parser
bypass-url-parser
IlanKalendarov/PyHook
PyHook is an offensive API hooking tool written in python designed to catch various credentials within the API call.
cosine0/dllhook
A tool for hooking Windows applications and jumping to your Python code with the injected Python interpreter
christophetd/spoofing-office-macro
:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.