Pinned Repositories
ADModule
Microsoft signed ActiveDirectory PowerShell module
BadBlood
BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.
docker_elastalert
custom built docker on Ubuntu 16.04 with elastalert
docker_mdbook
jupyter_threathunt
jupyter notebook to deploy terraform_threathunt an ansible_threathunt
logstashrest
logstash configuration with REST API plugin
mdBook
Create book from markdown files. Like Gitbook but implemented in Rust
ShellcodeWrapper
Shellcode wrapper with encryption for multiple target languages
threathunt
threathunt_student
threathunt repo for students
crimsoncore's Repositories
crimsoncore/ADModule
Microsoft signed ActiveDirectory PowerShell module
crimsoncore/WMImplant
This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.
crimsoncore/Invoke-CradleCrafter
PowerShell Remote Download Cradle Generator & Obfuscator
crimsoncore/ShellcodeWrapper
Shellcode wrapper with encryption for multiple target languages
crimsoncore/PowerEvents
PowerEvents is a PowerShell module that assists in the registration of WMI permanent event subscriptions.