Name: Rahmat Nurfauzi
Type: User
Bio: Security Researcher/Red/Purple Teaming/Adversary Simulation/Threat Hunter. Contributors of Atomic Red Team, PS Empire, MITRE ATT&CK Framework, LOLBas, and more.
Twitter: infosecn1nja
Location: Jakarta, Indonesia
Rahmat Nurfauzi's Projects
Attack and defend active directory using modern post exploitation adversary tradecraft activity
Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
Small and highly portable detection tests.
MITRE ATT&CK Windows Logging Cheat Sheets
A curated list of awesome resources related to Mitre ATT&CK™ Framework
A curated list of awesome threat detection and hunting resources
A curated list of Awesome Threat Intelligence resources
Six Degrees of Domain Admin
Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Detect Tactics, Techniques & Combat Threats
Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
Convert Empire profiles to Apache mod_rewrite scripts
Egress-Assess is a tool used to test egress data detection capabilities
Empire is a PowerShell and Python post-exploitation agent.
The Hunting ELK
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
Malicious Macro Generator
Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.
Metasploit Framework
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
initial commit
Python Server for PoshC2
Wiki to collect Red Team infrastructure hardening resources
A collection of red teaming and adversary emulation related tools, scripts, techniques, notes, etc
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
Trying to tame the three-headed dog.
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.