invokethreatguy Goto Github PK

external_c2_framework

Python api for usage with cobalt strike's External C2 specification

externalc2.net

.NET implementation of Cobalt Strike's External C2 Spec

extps-cobalt-strike-bof

Extended Process List (Search functionality)

facedancer

Playing around with token manipulation in C#.

falconfriday

Bi-weekly hunting queries

falconstrike

A stealthy, targeted Windows Loader for delivering second-stage payloads(shellcode) from Github to the host machine undetected

farmer

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

fennec

Artifact collection tool for *nix systems

fibratus

A modern tool for the Windows kernel exploration and tracing

fido

A PowerShell script to download Windows ISOs or the UEFI Shell

findetwproviderimage

Quickly search for references to a GUID in DLLs, EXEs, and drivers

findobjects-bof

A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or process handles.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

firepwd

firepwd.py, an open source tool to decrypt Mozilla protected passwords

firewalker

firmware-security-training

fitm

FitM, the Fuzzer in the Middle, can fuzz client and server binaries at the same time using userspace snapshot-fuzzing and network emulation. It's fast and comparably easy to set up.

forest-trust-tools

Proof-of-concept tools for my AD Forest trust research

forkplayground

An implementation and proof-of-concept of Process Forking.

fox

A companion tool for BloodHound offering Active Directory statistics and number crunching

fransom

Fraktal's Ransomware Emulator

freedom_shield

Freedom Shield was developed to protect the rights of individuals to peaceably assemble and petition their government.

freshycalls

FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

frida-windows-playground

A collection of Frida hooks for experimentation on Windows platforms.

frostbyte

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fully-undetectable-techniques

functionstomping

A new shellcode injection technique. Given as C++ header or standalone Rust program.

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.