sec-tools-repo Goto Github PK

redelk-workshop

Items related to the RedELK workshop given at security conferences

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

redteampowershellscripts

Various PowerShell scripts that may be useful during red team exercise

redtips

Red Team Tips as posted by @vysecurity on Twitter

remotekrbrelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

rengine

reNgine is an automated reconnaissance framewor for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather..

responder3

Responder for Python3

respotter

Respotter is a Responder honeypot! Catch attackers and red teams as soon as they spin up Responder in your environment.

restrictedadmin

Remotely enables Restricted Admin Mode

retrievir

PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

rubeus

Trying to tame the three-headed dog.

rustdesk

An open-source remote desktop, and alternative to TeamViewer.

safetykatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

sauroneye

Search tool to find specific files containing specific words, i.e. files containing passwords..

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

sccmhunter

scriptblock-smuggling

Example code samples from our ScriptBlock Smuggling Blog post

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shadowspray

A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

sharpdump

SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.

sharpedrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

sharphide

Tool to create hidden registry keys.

sharphound

C# Data Collector for BloodHound

sharpkiller

Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8

sharpsccm

A C# utility for interacting with SCCM

sharpshooter

Payload Generation Framework