Rasta Mouse

Sherlock. PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

Watson. Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

ThreatCheck. Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

TikiTorch. Process Injection

SharpC2. Command and Control Framework written in C#

AmsiScanBufferBypass. Bypass AMSI by patching AmsiScanBuffer

OST-C2-Spec. Open Source C&C Specification

MiscTools. Miscellaneous Tools

Crystal-Loaders. A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike

CsWhispers. Source generator to add D/Invoke and indirect syscall methods to a C# project.

process-inject-kit. Port of Cobalt Strike's Process Inject Kit

Aggressor-Script. Collection of Aggressor Scripts for Cobalt Strike

DInvoke. Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

EWSToolkit. Abusing Exchange via EWS

PPEnum. Simple BOF to read the protection level of a process

SpawnWith. C++

RuralBishop. D/Invoke port of UrbanBishop

SCMUACBypass. C++

ExternalC2.NET. .NET implementation of Cobalt Strike's External C2 Spec

GadgetHunter. Find jmp gadgets for call stack spoofing.

Fork-n-Run. C#

MinHook.NET. A C# port of the MinHook API hooking library

CollectorService. C#

Rosplant. C#

AsyncNamedPipes. Send and receive messages over Named Pipes asynchronously.

pwnlift. Easy peasy file uploads

KerbApp. HTML

Invoke-LoginPrompt. Invokes a Windows Security Login Prompt and outputs the clear text password.

SQL-BOF. Library of BOFs to interact with SQL servers

AsyncSockets. Example of async client/server sockets in .NET 5

PacketAlchemy. Playing with packets in C#

Mjolnir. Shell

offensive-defence. HTML

AMSITrigger. The Hunt for Malicious Strings

Covenant. Covenant is a collaborative .NET C2 framework for red teamers.

OffensiveCSharp. Collection of Offensive C# Tooling

SharpRDP. Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

McAfeeForOutlook. Beef hook OWA / Outlook

EncryptedKeyExchange. C#

EDD. Enumerate Domain Data

CobaltStrike_OpenBeacon. Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

SharpSploit. SharpSploit is a .NET post-exploitation library written in C#

CVE-2018-19320. Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

BOF-PE. An example reference design for a proposed BOF PE

KaynLdr. KaynLdr is a Reflective Loader written in C/ASM

SQLRecon. A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

rust_syscalls. Single stub direct and indirect syscalling with runtime SSN resolving for windows.

Titanis. Windows protocol library, including SMB and RPC implementations, among others.

Rubeus. Trying to tame the three-headed dog.

InlineExecute-Assembly. InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

CVE-2021-44228-Apache-Log4j-Rce. Apache Log4j 远程代码执行

SharpC2-Docs. Python

FindFrontableDomains. Search for potential frontable domains

CoreSploit. Initial Commit of Coresploit

rastamouse.me. HTML

KaynStrike. URDL for CS