node011 Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adgenerator

Active Directory Generator files for Movement, Pivoting, and Persistence for Pentesters and Ethical Hackers.

amsi-bypass

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi-killer

Lifetime AMSI bypass

amsi_patch

Patching AmsiOpenSession by forcing an error branching

autofunkt

Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles

beacon_source_new

not a reverse-engineered version of the Cobalt Strike Beacon

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

bootdoor

An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobaltstrike-aggressor-scripts-collection

Collection of tested Cobaltstrike aggressor scripts.

cobaltstrike_redteam_cheatsheet

Useful Cobalt Strike techniques learned from engagements

cobaltwhispers

CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process injection, persistence and more, leveraging direct syscalls (SysWhispers2) to bypass EDR/AV

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

coonectwise-msf

crossc2

generate CobaltStrike's cross-platform payload

cve-2022-39197-fix_patch

CVE-2022-39197 bug fix patch

cve-2023-4911

PoC for CVE-2023-4911

defender-exclusions-creator-bof

digitalocean-app-redirector

Reverse-HTTP Redirector via DigitalOcean Apps Platform

docker-ngrok-server

docker-ngrok-server

dockerfiles

dot-files

edrsnowblast

This project is an EDRSandblast fork, adding some features and custom pieces of code.

evilgophish

evilginx2 + gophish

exploitgsm

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

exploits

Repo with different exploits & PoCs