CyberWarFare Labs

Advanced-Process-Injection-Workshop. C++

RedCloud-OS. RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)

PivotSuite. Network Pivoting Toolkit

Red-Infra-Craft. RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create advanced phishing & payload infras

Vulnerable_Machine. This repository contain all virtual vulnerable machine. These vulnerable machine are Window and Linux based.

VEH-PoC. C

Journey-to-McAfee. C

Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW. CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"

GoogleWorkspaceDirectoryDump. Python

GCPTokenReuse. Python

RedBeacon-AI. LLM-Powered C2 Framework leveraging AI platform APIs

black-friday-cyber-sale-2025.

Red-Team-Infrastructure-Wiki. Wiki to collect Red Team infrastructure hardening resources

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

RedTeam. Tools & Interesting Things for RedTeam Ops

RedHunt-OS. Virtual Machine for Adversary Emulation and Threat Hunting

Multi-Cloud-Phishing-Kit. Python

APTSimulator. A toolset to make a system look as if it was the victim of an APT attack

shad0w. A post exploitation framework designed to operate covertly on heavily monitored enviroments

CarbonCopy. A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

macro_pack. macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

BloodHound. Six Degrees of Domain Admin

Tokenvator. A tool to elevate privilege with Windows Tokens

Apfell. A collaborative, multi-platform, red teaming framework

fuzzing. Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

CursedChrome. Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

nishang. Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Serverless-AiTM-Kit. JavaScript

Stormspotter. Azure Red Team tool for graphing Azure and Azure Active Directory objects

evil-winrm. The ultimate WinRM shell for hacking/pentesting

krbrelayx. Kerberos unconstrained delegation abuse toolkit

GCP-Threat-Research-Matrix. HTML

caldera. Automated Adversary Emulation

PowerTools. PowerTools is a collection of PowerShell projects with a focus on offensive operations.

misc. PHP

Amass. In-depth Attack Surface Mapping and Asset Discovery

UserSimulation. Python

donut. Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

SkyArk. SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS