Ross

SharpEDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

Invoke-EDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services, the registry and running drivers for the presence of known defensive products such as AV's, EDR's and logging tools.

FindFrontableDomains. Forked and updated with some additional features over the original

Rubeus-to-Hashcat. Converts / formats Rubeus kerberoasting output into Hashcat usable format

PyWxDump. 获取微信账号信息(昵称/账号/手机/邮箱/数据库密钥/wxid)；PC微信数据库读取、解密脚本；聊天记录查看工具；聊天记录导出为html(包含语音图片)。支持多账户信息获取，支持所有微信版本。

CarbonCopy. A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

Mask-Maker. quick and dirty script for generating hcmask files

HackTIve. Active Threat Intelligence Framework

signal-export. Export your Signal chats to markdown files with attachments

spy-extension. A Chrome extension that will steal literally everything it can