Laboratorio de phishing, para curso Preparación de Campañas Red Team, de una Universidad de Santiago, agosto 2022. - Ppamo/usach_phishing_lab_202208

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available. - ScriptIdiot/BOF-patchit

HTTP3-attacks (CVE-2022-30592). Contribute to efchatz/HTTP3-attacks development by creating an account on GitHub.

Cobalt Strike UDRL for memory scanner evasion. Contribute to kyleavery/AceLdr development by creating an account on GitHub.

BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361] - francozappa/blur

In-memory token vault BOF for Cobalt Strike. Contribute to Henkru/cs-token-vault development by creating an account on GitHub.

List of Awesome CobaltStrike Resources. Contribute to zer0yu/Awesome-CobaltStrike development by creating an account on GitHub.

### Summary
An attacker could transfer issues, merge requests of another project to the imported project by importing a crafted GitLab export.

### Steps to reproduce
1. Import the attached...

Attacks against LSA can be made harder with Credential Guard and LSA Protection. Security Support Providers get access to credentials via LSA. Network Providers also get credentials access on logins and password changes.

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles - CodeXTF2/Burp2Malleable

Contribute to morRubin/NegoExRelay development by creating an account on GitHub.

Red Teamer. Contribute to LIMI-JUICED/alx-higher_level_programming development by creating an account on GitHub.

Automated Red Team Infrastructure deployement using Docker - khast3x/Redcloud

With the broad adoption of Kernel Address Space Layout Randomization (KASLR) by modern systems, obtaining an information leak is a necessary component of mos...

A minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules. - evilsocket/sauron

Here are list of ways that can be used to dump the lsass.exe process for credential harvesting

Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers - fullstorydev/grpcurl

When starting a service, Windows require the path to the service binary. And if the full path to the binary has spaces in between the…

A Poc on blocking Procmon from monitoring network events - NUL0x4C/EtwSessionHijacking