m1ddl3w4r3 Goto Github PK

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

adlab-setup

adrecon

ads_methods

execution methods from Alternate Data Streams

amsitrigger

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active D

base-install-scripts

Hosting location for Win10 New machine image

bbot

A recursive internet scanner for hackers.

bloodhound

Six Degrees of Domain Admin

bloodhound.py

A Python based ingestor for BloodHound

certi

ADCS abuser

chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

chisel-strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

cobalt_strike_extension_kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.

cobaltstrikeparser

Parse cobalt strike beacons

crackmapexec

A swiss army knife for pentesting networks

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

defcon27scripts

scripts to use for KOH and stuff

defendercheck

Identifies the bytes that Microsoft Defender flags on.

dfscoerce

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

evilginx

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilginx-phishlets

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

execremotenet

Execute Remote Assembly with args passing and with AMSI and ETW patching .

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

gat

Golang Access Tool