D.Snezhkov — Vaya

zombieant. Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

227

SSHoRTy. A progressive, customizable armored SSH tunnel implant for Linux and MacOS systems

134

shutter. C++

125

deepsea. DeepSea Phishing Gear

122

typhoon. C#

108

TruffleSnout. Iterative AD discovery toolkit for offensive operations

86

racketeer. C#

69

elfpack. C++

51

foxtrot. C&C to deliver files and shuttle command execution instructions between an external actor and an internal agent with the help of Firefox Private Encrypted File Sharing

38

octohook. Git Web Hook Tunnel for C2

28

RunDllMShim. Run Managed Assemblies with RunDll

17

exclave. C++

16

cflsh. CloudFlare Worker Shell

14

mdns. mdns is a scanner to query services that respond to mDNS, one or many (over 12K). List of services is based on https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml

12

HandsFreeCOM. Self-Loading Registration Free COM Functions

11

socksdll. Experiments in Go/C bridging and SOCKS5 server

10

h53. A utility to force query DNS over DoH off of CloudFlare API when DNS block is in place

10

pufferfish. C

9

amoeba. Amoeba: Corporate Subsidiary Search and Intel

8

USBeacon. Simple auditing beacon framework for USB payloads

8

LST. A collection of tools created with the goal of overcoming restrictions on data exfiltration and infiltration vectors placed by enterprise captive portals with or without DLP tech, in the form of screen remote sessions, terminal services and kiosks.

6

redphin. RedPhin - A framework for coding and executing phishing and sec awareness campaigns

6

coalmine. Coalmine: De-mining canaries in common file formats

5

webglance. Compact web site screenshot utility based on Chrome Dev Tools Debugging Protocol

4

nciscoaudit. Nessus Cisco .audit vs static "show [running] config file" reporter

3

burprpt. Rudimentary Burp scanner XML report converter to TXT

2

Shellcode-Via-HTA. How To Execute Shellcode via HTA

2

rcert. Go

2

xsnake-workflows. Repository of sample workflows for xsnake

1

htsnap. JavaScript

1

scrapers. Ruby

1

caa-twit. CAA record fetch for a domain or a list of domains

1

redscraper. JavaScript

1

codebook. Ruby

1

chisel. A fast TCP tunnel over HTTP

1

malstor. C++

1

python-powerdns-management. Python

1