glides Goto Github PK

peloader

Load PE via XML Attribute

penetration-testing-tools

A collection of more than 160+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

pezor

Open-Source Shellcode & PE Packer

phantom-dll-hollower-poc

Phantom DLL hollowing PoC

phineas-philes

mirroring the zines of phineas fisher

pupy

OpenSource cross-platform python security toolkit (remote shell)

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

redteam

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

redwarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

rubeus

Trying to tame the three-headed dog.

scripts

Small scripts that make life better

shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments

sharpcall

Simple PoC demonstrating syscall execution in C#

sharpcookiemonster

Extracts cookies from Chrome.

sharplocker

sharpminidump

Create a minidump of the LSASS process from memory

sharpoffensiveshell

A sort of simple shell which support multiple protocols.

sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

shellcodefluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

stage

Hi, what's up?

stracciatella

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

syswhispers2

AV/EDR evasion via direct system calls.

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

titanldr

Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH

typhoon