tigr0w Goto Github PK

evanmcbroom_perfect-loader

Load a dynamic library from memory by modifying the native Windows loader

everdox_infinityhook

Hook system calls, context switches, page faults and more.

eversinc33_gpudecryptshellcode

XOR decrypting shellcode using the GPU with OpenCL.

ewby_mockingjay_bof

Cobalt Strike Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique

exatrack_kdrill

Python tool to check rootkits in Windows kernel

f1zm0_acheron

indirect syscalls for AV/EDR evasion in Go assembly

faisal-p27_wareed-dns-c2

flangvik_obfuscatedsharpcollection

Attempt at Obfuscated version of SharpCollection

flangvik_teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

florylsk_recycledinjector

Native Syscalls Shellcode Injector

fortra_impacket

Impacket is a collection of Python classes for working with network protocols.

fortra_nanodump

The swiss army knife of LSASS dumping

fortra_no-consolation

A BOF that runs unmanaged PEs inline

fortynorthsecurity_autofunkt

Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles

frkngksl_nimexec

Fileless Command Execution for Lateral Movement in Nim

funnywolf_viper

Redteam operation platform with webui 图形化红队行动辅助平台

gabriellandau_pplfault

garrettfoster13_sccmhunter

ghostpepper108_evasion

gjfvieira_frilane

Automated iOS Frida Gadget injection and Testflight deployment using Frida and Fastlane

gokart

A static analysis tool for securing Go code

greatsct_greatsct

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

greydgl_pentestgpt

A GPT-empowered penetration testing tool

gtfoargs_gtfoargs.github.io

GTFOArgs is a curated list of programs and their associated arguments that can be exploited to gain privileged access or execute arbitrary commands, using argument injection.

gtworek_priv2admin

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

gtworek_psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

hackerhouse-opensource_marble

The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.

hackerhouse-opensource_offensivelua

Offensive Lua.

hackerhouse-opensource_signtoolex

Patching "signtool.exe" to accept expired certificates for code-signing.

hackerhouse-opensource_wmiprocesswatcher

A CIA tradecraft technique to asynchronously detect when a process is created using WMI.