koolacac Goto Github PK

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

malwaredevtalk

managedinjection

A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge

metasploit-framework

Metasploit Framework

mimikore

.NET 5 Single file Application

mirrordump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

misc

miscellaneous scripts and programs

muddyc3

Leaked Muddyc3 C2 source.

muddyc3v1.0.1-

This is the MuddyWater APT C3 v1.0.1 Source

net-obfuscate

Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

netloader

Loads any C# binary in mem, patching AMSI + ETW.

netntlm

A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP

nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

nimpackt-v1

Nim-based assembly packer and shellcode loader for opsec & profit

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

nsgencs

Extendable payload obfuscation and delivery framework

ntlmv1-multi

NTLMv1 Multitool

o365-attack-toolkit

A toolkit to attack Office365

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

ortbot

Open Red Team Bag of Tricks - Red Teaming and Pentesting cheat sheet and trick book

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

pafishmacro

Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

pentesting-dump

Scripts, tools, and proof-of-concepts to aid in a penetration test.

pentesting_tools

For educational purposes only, use at your own responsibility. metasploit_rc_scripts - contains either sample rc files for explatation or perls to generate such. nmap_scans - is for some ready to use nmap scannings. other_scans - scripts that can be used for scanning if nothing else is availible. post - is for post exploatation. shellshock - is a script to get use of the shellshock vulnarability. tools - are other tools. If any questions please ask at [email protected]

persistbof

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

pivotnacci

A tool to make socks connections through HTTP agents