r0lan

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

Awesome-Advanced-Windows-Exploitation-References. List of Awesome Advanced Windows Exploitation References

Awesome-Study-Resources-for-Kernel-Hacking. Kernel Hacking study materials collection

Malleable-C2-Profiles-Collection. A collection of Malleable C2 profiles that work with Cobalt Strike 3.x.

Red-Teaming-Toolkit. A collection of open source and commercial tools that aid in red team operations.

atomic-red-team. Small and highly portable detection tests.

CobaltStrike-Toolset. Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

IOS-Surface-Security-Checker. A very light scanner that replaces some features of MobSF framework

IntruderPayloads. A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

malware-samples. A collection of malware samples caught by several honeypots i manage

SocialEngineeringPayloads. This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.

cobalt-arsenal. My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

awesome-web-hacking. A list of web application security

awesome-browser-exploit. awesome list of browser exploitation tutorials

eaphammer. Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

Awesome-Hacking-1. A collection of various awesome lists for hackers, pentesters and security researchers

spoofing-office-macro. :fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

awesome-web-security. 🐶 A curated list of Web Security materials and resources.

btlejack. Bluetooth Low Energy Swiss-army knife

Red-Team-Infrastructure-Wiki. Wiki to collect Red Team infrastructure hardening resources

awesome-industrial-control-system-security. A curated list of resources related to Industrial Control System (ICS) security.

Infosec_Reference. Information Security Reference That Doesn't Suck

sandbox-attacksurface-analysis-tools. C#

LOLBAS-1. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Windows-Kernel-Explorer. A free but powerful Windows kernel research tool

Invoke-BSOD. For when you want a computer to be done - without admin!

Internal-Monologue. Internal Monologue Attack: Retrieving NTLM Hashes without Mimikatz

Invoke-WCMDump. PowerShell Script to Dump Windows Credentials from the Credential Manager

build-your-own-x. 🤓 Build your own (insert technology here)

TCP-Starvation. Python

attack-navigator. Web app that provides basic navigation and annotation of ATT&CK matrices

CVE-2017-11883. CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

cameradar. Cameradar hacks its way into RTSP CCTV cameras

RAI. Rapid Attack Infrastructure (RAI)

AggressorScripts-1. Various Aggressor Scripts I've Created.

aclpwn.py. Active Directory ACL exploitation with BloodHound

PowerLessShell. Run PowerShell command without invoking powershell.exe

meltdown. This repository contains several applications, demonstrating the Meltdown bug.

MoveKit. Cobalt Strike kit for Lateral Movement

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

pe-sieve. Scans a given process, searching for the modules containing in-memory code modifications. When found, it dumps the modified PE.

Invoke-PSImage. Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

AllTheThings. Includes 5 Known Application Whitelisting/ Application Control Bypass Techniques in One File.

DeviceGuardBypasses. A repository of some of my Windows 10 Device Guard Bypasses

C2K. Command and Control Kit. Assists with deploying Cobalt Strike team servers. All you need to download is the files.zip file which contains everything else.

redteam-plan. Issues to consider when planning a red team exercise.

HackVault. A container repository for my defensive/offensive hacks!

awesome-hacking. A curated list of awesome Hacking tutorials, tools and resources

DomainPasswordSpray. DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

CatMyPhish. Search for categorized domain

docker-cve-search. Dockerized cve-search as a web app

powercloud. Deliver powershell paylods via DNS TXT records.

Robber. Robber is open source tool for finding executables prone to DLL hijacking

Aggressor-VYSEC. PowerShell

Noctilucent. Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise

CVE-2020-0668. Use CVE-2020-0668 to perform an arbitrary privileged file move operation.

firmware_security_docs. HTML

EmbedInHTML. Embed and hide any file in an HTML file

Invoke-SilentCleanUpBypass. Bypass UAC fileless

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)