offs3cops Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adessentials

PowerShell Active Directory helper functions to manage healthy Active Directory

attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

automatedemulation

An automated Breach and Attack Simulation lab with terraform. Built for IaC stability, consistency, and speed.

awesome-red-team-operations

azure-red-team

Azure Security Resources and Notes

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

bloodhound-tools

Collection of tools that reflect the network dimension into Bloodhound's data

burp2malleable

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

cheat-sheet---active-directory

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

cobaltstrike_redteam_cheatsheet

Useful Cobalt Strike techniques learned from engagements

create-vulnerable-adds

Installs ADDS and configures a vulnerable domain via a powershell script

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

custom-bloodhound-queries

database-security-audit

Training course materials, scripts and notes related to database security audit and penetration testing

defendercheck

Identifies the bytes that Microsoft Defender flags on.

dnscat2

dumpert

LSASS memory dumper using direct system calls and API unhooking.

edrs

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

execcmd

A simple powershell script to execute one liner commands in windows

family-of-client-ids-research

Research into Undocumented Behavior of Azure AD Refresh Tokens

get-pip

Check the associated blog for more details.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

harmj0ycheatsheets

Cheat sheets for various projects.

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

markdown-here

Google Chrome, Firefox, and Thunderbird extension that lets you write email in Markdown and render it before sending.