GCP-Hound - Google Cloud Security Attack Path Discovery Tool - v1.1.1

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

Collection of Beacon Object Files (BOF) for Cobalt Strike

Red team Interview Questions

Boilerplate to develop raw and truly Position Independent Code (PIC).

Various one-off pentesting projects written in Nim. Updates happen on a whim.

A Mythic Agent written in PIC C.

An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution

Active Directory certificate abuse.

A command and control framework.

A dynamic array implementation in C similar to the one found in standard C++

Slides and Codes used for the workshop Red Team Infrastructure Automation

Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)

The swiss army knife of LSASS dumping

zlib replacement with optimizations for "next generation" systems.

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining …

A tutorial on how to write a packer for Windows!

Use hardware breakpoints to spoof the call stack for both syscalls and API calls

A memory-based evasion technique which makes shellcode invisible from process start to end.

Defeating Windows User Account Control

Useful Cobalt Strike BOFs found or used during engagements

Python3 terminal application that contains 400 Neo4j cyphers for BloodHound data sets and 383 GUI cyphers

Creating a repository with all public Beacon Object Files (BoFs)

Situational Awareness commands implemented using Beacon Object Files