ActiveBreach

SharpShooter. Payload Generation Framework

o365-attack-toolkit. A toolkit to attack Office365

CACTUSTORCH. CACTUSTORCH: Payload Generation for Adversary Simulations

Chameleon. Chameleon: A tool for evading Proxy categorisation

LinkedInt. LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

Farmer. C#

RDPInception. A proof of concept for the RDP Inception Attack

DragonCastle. A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.

RegPwn. C#

PowerDNS. PowerDNS: Powershell DNS Delivery

com_inject. C++

ParallelSyscalls. C++

SharpPack. An Insider Threat Toolkit

firewalker. C

sitrep. C#

WMIPersistence. WMI Event Subscription Persistence in C#

Browser-ExternalC2. External C2 Using IE COM Objects

Execute-GithubAssembly-Aggressor. Aggressor Script to Execute Assemblies from Github

CloneVault. C#

functionpeekaboo. C++

RegistryStrikesBack. C#

lambda-webbugs. A proof of concept for delivering webbugs via AWS lambda

ANGRYPUPPY. Bloodhound Attack Path Automation in CobaltStrike

SharpAltiris. C#

CVE-2018-4878. ActionScript

PleasantTools. Tools for Attacking Pleasant Password Server

CVE-2023-26258-ArcServe. Python

TakeATest. JavaScript

genHTA. Generates anti-sandbox analysis HTA files without payloads

Invoke-ProcessScan. Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.

morphHTA. morphHTA - Morphing Cobalt Strike's evil.HTA

CVE-2017-8759. CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

LyncSniper. LyncSniper: A tool for penetration testing Skype for Business and Lync deployments

Aggressor-VYSEC. PowerShell