A collaborative, multi-platform, red teaming framework

Adversary Emulation Framework

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

Template-Driven AV/EDR Evasion Framework

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Run Powershell without software restrictions.

ScareCrow - Payload creation framework designed around EDR bypass.

Active Directory and Internal Pentest Cheatsheets

Azure Security Resources and Notes

PowerShell rebuilt in C# for Red Teaming purposes

Windows Exploit Suggester - Next Generation

HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

Run PowerShell with rundll32. Bypass software restrictions.

Multilayered AV/EDR Evasion Framework

Mimikatz implementation in pure Python

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

a tool to help operate in EDRs' blind spots

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

Keep searching, reading webpages, reasoning until it finds the answer (or exceeding the token budget)

Use cloudflare workers to build socks5 proxy service

Wiki to collect Red Team infrastructure hardening resources

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.