TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

game of active directory

Educational, CTF-styled labs for individuals interested in Memory Forensics

Docker/Portainer management app for iOS, iPadOS and macOS.

Windows Event Log Killer

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A Powershell incident response framework

VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.

All-in-One malware analysis tool.

Pre-Built Vulnerable Environments Based on Docker-Compose

PowerSploit - A PowerShell Post-Exploitation Framework

A Cobaltstrike container, built for Warhorse

Covenant is a collaborative .NET C2 framework for red teamers.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Small and highly portable detection tests based on MITRE's ATT&CK.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Domain Password Audit Tool for Pentesters

Attack and defend active directory using modern post exploitation adversary tradecraft activity

PowerShell rebuilt in C# for Red Teaming purposes

WireGuard Web UI for self-serve client configurations, with optional auth.

Modern Honey Network

Some scripts useful for red team activities

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be cha…