batsec

shad0w. A post exploitation framework designed to operate covertly on heavily monitored environments

DarkLoadLibrary. LoadLibrary for offensive operations

ADCSPwn. A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

darkarmour. Windows AV Evasion

Ghost-In-The-Logs. Evade sysmon and windows event logging

ChromeTools. A collection of tools to abuse chrome browser

EvtMute. Apply a filter to the events being reported by windows event logging

DefensiveInjector. Shellcode injector using direct syscalls