theomilan3 Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

adrecon1111111111

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

adsearch

A tool to help query AD via the LDAP protocol

advanced-process-injection-workshop

aggressorscripts

Aggressor scripts for use with Cobalt Strike 3.0+

alerting

📟 Get notified when your data meets certain conditions by setting up monitors, alerts, and notifications

alerting-dashboards-plugin

📟 Manage your monitors, alerts and notifications in OpenSearch Dashboards

allthewriteups

Write-ups and walkthroughs for Hack The Box machines

amsi_bypass_in_2023

Amsi Bypass payload that works on Windwos 11

anomaly-detection-dashboards-plugin

Manage your detectors and identify atypical data in OpenSearch Dashboards

attack_data

A repository of curated datasets from various attacks

autonomousthreatsweeper

Threat Hunting queries for various attacks

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

beaconeye

Hunts out CobaltStrike beacons and logs operator command output

blackout

kill anti-malware protected processes ( BYOVD) (Microsoft Won )

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

bloodhoundqueries

bof_collection

Various Cobalt Strike BOFs

bof_template

A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use internal Beacon APIs. BOFs are a way to rapidly extend the Beacon agent with new post-exploitation features.

bofs

Collection of Beacon Object Files

callstackspoofer111

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

cheatsheets

A collection of all my personal cheat sheets and guides as I progress through my career in offensive security.

chimera111

Automated DLL Sideloading Tool With EDR Evasion Capabilities

cloudinject

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobalt-strike

Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection

cobaltstrike_bof_collections

Useful Cobalt Strike BOFs found or used during engagements

common-utils

Offers a library of utilities for building Java-based OpenSearch plugins

conditionalaccess