This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

NTLM relaying for Windows made easy

C2 that would probably bypass everything since it's so simple, but not much features than execute commands, and get info from the victim machine.

Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform

Macro-header for compile-time C obfuscation (tcc, win x86/x64)

Labs for Practical Malware Analysis & Triage

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

Exchange privilege escalations to Active Directory

⬛️ CLI tool for saving complete web pages as a single HTML file

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

🦀 | RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

Generates malicious LNK file payloads for data exfiltration

Simulate the behavior of AV/EDR for malware development training.

Golang library for malware development

Remove junk bytes from a large binary malware

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Real fucking shellcode encryptor & obfuscator tool

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP queryin…

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan

rust 免杀，方法记录 - 偶尔更新

shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软

海康威视综合安防平台后渗透利用工具

Azure Security Resources and Notes