Russel Van Tuyl

merlin. Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

go-shellcode. A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

merlin-agent. Post-exploitation agent for Merlin

go-clr. A PoC package for hosting the CLR and executing .NET from Go

merlin-agent-dll. Go

ADPasswordHealth. A tool to evaluate the password health of Active Directory accounts.

Guinevere. Automated Security Assessment Reporting Tool

go-coff. Load and execute a common object file format (COFF) in the current process

merlin-cli. gRPC client for the Merlin Server

shellbot. Slack/Microsoft Teams notification for new Empire/Meterpreter checkins

winhttp. A library to make HTTP requests with the Windows winhttp API

scripts. Miscellaneous for various things

Red-Teaming-Toolkit. A collection of open source and commercial tools that aid in red team operations.

apt2. automated penetration toolkit

blackhat-arsenal-tools. Official Black Hat Arsenal Security Tools Repository

merlin-docker. Base Docker container image for Merlin

oddments. Go

sparta. Network Infrastructure Penetration Testing Tool

gophish. Open-Source Phishing Toolkit

merlin-documentation. Merlin C2 Documentation Repository for https://merlin-c2.readthedocs.io

ja3transport. Impersonating JA3 signatures

AggressorScripts. Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

gobuster. Directory/file & DNS busting tool written in Go

FlyingAFalseFlag. Slides and Code for the BHUSA 2019 talk: Flying a False Flag

Seatbelt. Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

merlin-message. Messages exchanged between a Merlin Server and Agent

npipe. A Windows named pipe implementation written in pure Go.

sliver. Implant framework

merlin-prism.

MythicContainer. GoLang package for creating Mythic Payload Types, C2 Profiles, Translation Services, WebHook listeners, and Loggers

gopaque. Go implementation of OPAQUE (hidden password user registration and auth)

presentations. SpecterOps Presentations

OS-CFDB. Open Source - Common Findings DataBase (JSON & MD)