catpipeless's Stars
BurntSushi/ripgrep
ripgrep recursively searches directories for a regex pattern while respecting your gitignore
kgretzky/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Orange-Cyberdefense/GOAD
game of active directory
Pennyw0rth/NetExec
The Network Execution Tool
splunk/attack_range
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
FuzzySecurity/Sharp-Suite
Also known by Microsoft as Knifecoat :hot_pepper:
daem0nc0re/TangledWinExec
PoCs and tools for investigation of Windows process execution techniques
the-useless-one/pywerview
A (partial) Python rewriting of PowerSploit's PowerView
dafthack/GraphRunner
A Post-exploitation Toolset for Interacting with the Microsoft Graph API
GhostPack/PSPKIAudit
PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.
chvancooten/NimPlant
A light-weight first-stage C2 implant written in Nim.
GhostPack/ForgeCert
"Golden" certificates
RedSiege/GraphStrike
Cobalt Strike HTTPS beaconing over Microsoft Graph API
fortra/No-Consolation
A BOF that runs unmanaged PEs inline
boku7/azureOutlookC2
Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.
christophetd/Adaz
:wrench: Deploy customizable Active Directory labs in Azure - automatically.
ieshreya/Obsidian-Cheat-Sheet
all the basic cheatsheets you need to get started to make notes in obsidian.
cube0x0/MiniDump
C# Lsass parser
BlackSnufkin/GhostDriver
yet another AV killer tool using BYOVD
realoriginal/titanldr-ng
A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.
rod-trent/Sentinel-SOC-101
Content and collateral for the Microsoft Sentinel SOC 101 series
mgeeky/VisualBasicObfuscator
Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
naksyn/Embedder
Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
ustayready/wnfexec
WNF Code Execution Library Using C#
LivingInSyn/RMML
A list of RMMs designed to be used in automation to build alerts
TactiKoolSec/OTHF
Open Threat Hunting Framework
wotwot563/aad_prt_bof
RamblingCookieMonster/PSNeo4j
Simple Neo4j PowerShell Wrapper
kopp0ut/godropit
Purple Team Dropper generator using open source templates.
invictus-ir/kql_queries
KQL queries for Incident Response