credteam Goto Github PK

0xdarkvortex-malwaredevelopment

This repo will contain code snippets for blogs: Malware on Steroids written by me at https://scriptdotsh.com/index.php/category/malware-development/

0xdarkvortex-red-team-ttps-part-2

Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

aes-powershellcode

Standalone version of my AES Powershell payload for Cobalt Strike.

aggressorcollection

Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors

aggressorscripts

Various Aggressor Scripts I've Created.

aggressorscripts-1

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

aggressorscripts-2

Aggressor scripts for use with Cobalt Strike 3.0+

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

alanframework

A post-exploitation framework

amsiscanbufferbypass

Circumvent AMSI by patching AmsiScanBuffer

asmhalosgate

x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks

atomicsyscall

Tools and PoCs for Windows syscall investigation.

binary-auditing-solutions

Learn the fundamentals of Binary Auditing. Know how HLL mapping works, get more inner file understanding than ever.

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

botnet-blogpost

This repo basically contains the code that was mentioned in the blogposts that was written by me at:

building-c2-implants-in-cpp

The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogunlab).

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

chameleon

Chameleon: A tool for evading Proxy categorisation

chisel

A fast TCP/UDP tunnel over HTTP

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobaltstrike

CobaltStrike's source code

cobaltstrikeparser

cobaltstrikereflectiveloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

cobaltstrikescan

Scan files or process memory for CobaltStrike beacons and parse their configuration

cpp-implant

A simple implant showcasing modern C++

cpu-internals

Intel / AMD CPU Internals

cronos-rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.