r3dc4t0x00 Goto Github PK

ad-control-paths

Active Directory Control Paths auditing and graphing tools

admodule

Microsoft signed ActiveDirectory PowerShell module

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

alltools

All reasonably stable tools

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi-killer

Lifetime AMSI bypass

apt_report

Interesting APT Report Collection And Some Special IOC

avred

Analyse your malware to surgically obfuscate it

azure_workshop

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

beefygoodness

bitb

Browser In The Browser (BITB) Templates

blackout

kill anti-malware protected processes (BYOVD)

blacksmith

Building environments to replicate small networks and deploy applications

blackstone

Pentesting Reporting Tool

bootloader.malware--nashiito

This virus just deletes windows and show a custom message in the bootloader.

c3_connector

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

checkplease_sandbox_evasion

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloudlabsad

Terraform + Ansible deployment scripts for an Active Directory lab environment.

cve-2021-3156

cve-2021-40444

CVE-2021-40444 PoC

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

cve-2023-28252

cve-2024-31497-docker

cve-2024-31497-poc

Proof Of Concept that exploits PuTTy CVE-2024-31497.

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

dllhijacktest

DLL and PowerShell script to assist with finding DLL hijacks

dllsideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading