tylous Goto Github PK

auto_eap

Automated Brute-Force Login Attacks Against EAP Networks.

azureattackkit

Collection of Azure Tools to Pull down for Attacking an Env

build_a_phish

Ansible playbook to deploy a phishing engagement

cs-tools

cobalt strike tools

dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

dockerfiles

My collection of dockerfiles

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilnovnc

Ready to go Phishing Platform

file-smuggling

HTML smuggling is not an evil, it can be useful

file-tunnel

Tunnel TCP connections through a file

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

gofalcon

Golang-based SDK to CrowdStrike's APIs

graphrunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

limelighter

A tool for generating fake code signing certificates or signing real ones

mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

packmypayload

A PoC that packages payloads into output containersb to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

pecheck

A tool to verify and create PE Checksums for Portable Executable (PE) files.

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

rustdesk-hvnc

HVNC based on RustDesk

scapy-com

Forked extended scapy version

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

sharpallthethings

The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

slides

slurp

The original slurp source

sniffair

A framework for wireless pentesting.

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.