securitytimes Goto Github PK

alaris

A protective and Low Level Shellcode Loader the defeats modern EDR systems.

alltools

All reasonably stable tools

cloud

Red Teaming

cloudburst

CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.

cobaltstrike

CobaltStrike's source code

crt

csharp

Various C# projects for offensive security

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

forest-trust-tools

Proof-of-concept tools for my AD Forest trust research

icmp-transfertools

Transfer files to and from a Windows host via ICMP in restricted network environments.

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

magiclib

Non organized Cpp code files I used for my research on Windows

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

phishingtemplates

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

process-injection

processinjection

red_team_tool_countermeasures

redteamcode

ruralbishop

D/Invoke port of UrbanBishop

scripts

Small scripts that make life better

sectimes

Tried and tested

shellcode

Shellcodes for Windows/Linux/BSD running on x86, AMD64, ARM, ARM64

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

swap_digger

swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.

syswhispers

AV/EDR evasion via direct system calls.

test

toolsoftrade

understanding-and-abusing-access-tokens

weaponize_process_injection_windows_sigsegv2_2019

Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog