⛅️ 精选的 Cloudflare 工具、开源项目、指南、博客和其他资源列表。/ ⛅️ A curated list of Cloudflare tools, open source projects, guides, blogs and other resources.

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

Powershell script to do domain auditing automation

Create Anti-Copy DRM Malware

game of active directory

A centralized resource for previously documented WDAC bypass techniques

Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations

Test UI for RedEdr

Aims to identify sleeping beacons

Small tool to play with IOCs caused by Imageload events

ETW based POC to identify direct and indirect syscalls

Centralized resource for listing and organizing known injection techniques and POCs

Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms

A collection of red team techniques.

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

A complete terminal user interface (TUI) for LDAP.

T-1 is a shellcode loader that leverages ML techniques to detect VM environments

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Evade EDR's the simple way, by not touching any of the API's they hook.

Evasive shellcode loader

Virtualized WiFi pentesting laboratory without the need for physical WiFi cards, using mac80211_hwsim. Docker version of WiFiChallenge Lab with modifications in the challenges and improved stabilit…

Stealthily inject shellcode into an executable

Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection

Sliver agent rewritten in C++

FaceDancer is an exploitation tool aimed at creating hijackable, proxy-based DLLs by taking advantage of COM-based system DLL image loading

Easy phishing environment builder (Red Team)

HookChain: A new perspective for Bypassing EDR Solutions