Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel

A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam

.NET/PowerShell/VBA Offensive Security Obfuscator

Azure DevOps Services Attack Toolkit

C++ self-Injecting dropper based on various EDR evasion techniques.

Cobalt Strike UDRL for memory scanner evasion.

linikatz is a tool to attack AD on UNIX

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

A C# port of the MinHook API hooking library

Source Code Management Attack Toolkit

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

C/C++ source obfuscator for antivirus bypass

A pure Python implementation of AES, with optional CBC, PCBC, CFB, OFB and CTR cipher modes.

OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.

.NET project for installing Persistence

The SpecterOps project management and reporting engine

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions

A curated list of various bug bounty tools

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

Declination of @matcornic Learn theme to Hugo

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

Impacket is a collection of Python classes for working with network protocols.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

OSCP Cheatsheets