rasta-mouse Goto Github PK

aggressor-script

Collection of Aggressor Scripts for Cobalt Strike

amsiscanbufferbypass

Bypass AMSI by patching AmsiScanBuffer

amsitrigger

The Hunt for Malicious Strings

asyncnamedpipes

Send and receive messages over Named Pipes asynchronously.

asyncsockets

Example of async client/server sockets in .NET 5

bastionbox

A simple bastion host setup designed for cloud-hosted lab environments.

beaconeye

Hunts out CobaltStrike beacons and logs operator command output

bettersafetykatz

BetterSafetyKatz

c2bridge

C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.

cobaltstrike

CobaltStrike's source code

collectorservice

coresploit

Initial Commit of Coresploit

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cswhispers

Source generator to add D/Invoke and indirect syscall methods to a C# project.

ctf-writeups

CTF write-ups from the VulnHub CTF Team

cve-2018-19320

Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

dns

A DNS library written in C#

easyhook-tutorials

Contains the source code for the EasyHook tutorials found at https://easyhook.github.io

edd

Enumerate Domain Data

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

elite

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

encryptedkeyexchange

ewstoolkit

Abusing Exchange via EWS

externalc2.net

.NET implementation of Cobalt Strike's External C2 Spec

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

findfrontabledomains

Search for potential frontable domains

fork-n-run

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.