maliciousgroup Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aiopluggy

A minimalist asyncio-ready plugin system

alienvault

A python3 tool to get OTX endpoints from domain using AT&T's AlienVault feed.

altdns

Slightly updated working version of altdns.

bashfuscator

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

blacklotus

BlackLotus UEFI Windows Bootkit

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

bugbountyconsole

A Windows/Linux console application used to attack bug bounty target with various attacks.

c2_automation

C2 Automation using Linode

cloudflare-bypass

Bypass Coudflare bot protection using Cloudflare Workers

edrsilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

eventlogcrasher

getdirs

A simple tool to extract all possible directories from a list of URLs.

goadvsphere

A vSphere deployment of GOADv2 BETA Testing (v0.1)

how2heap

A repository for learning various heap exploitation techniques.

internalallthethings

Active Directory and Internal Pentest Cheatsheets

ip-obfuscator

A redteam tool to obfuscate IPv4 addresses to evade AV or Application Firewalls

irc_c_bot

An IRC bot written in c99 for POSIX environments.

irc_py_bot

Python 3 Bot using Class Method overriding.

llvm-mingw

An LLVM/Clang/LLD based mingw-w64 toolchain

luigi

Luigi is a Python module that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization etc. It also comes with Hadoop support built in.

maldns

maldns uses the permutation functions from altdns to generate possible subdomains

mind-maps

Mind-Maps of Several Things

netdev

Asynchronous multi-vendor library for interacting with network devices

ntcreateuserprocess-post

NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version

offensive-security

Tools written by Malicious Group for Offensive Security education.

pickyonion

PICKYONION is a private red team python library focused on leveraging TOR to establish secure communication and hidden service hosting.

poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

pyfuscation

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

rdi-srdi

This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".