DfirJos / CnC-detection

Related projects: ⓘ

• ThunderGunExpress / Thunder_Woosus
  ☆36Updated 5 years ago
• slyd0g / SharpRoast-Parser
  Bash one-liner that will parse harmj0y's SharpRoast or Rebeus kerberoast into hashcat crack-able format.
  ☆32Updated 5 years ago
• ConsciousHacker / GreatSCT
  The project is called GreatSCT (Great Scott). GreatSCT is an open source project to generate application white list bypasses. This tool i…
  ☆28Updated 6 years ago
• bitsadmin / cobaltstrike
  Everything related to Cobalt Strike
  ☆15Updated 4 years ago
• attactics / cslogwatch
  Cobalt Strike log state tracking, parsing, and storage
  ☆22Updated 5 years ago
• tomkallo / SharpHungarian
  ☆23Updated this week
• 001SPARTaN / csfm
  Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.
  ☆64Updated 6 years ago
• alfarom256 / ExternalC2Go
  ☆15Updated 4 years ago
• aaronst / talks
  Presentation materials for talks I've given.
  ☆20Updated 4 years ago
• outflanknl / DoH_c2_Trigger
  Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/
  ☆52Updated 5 years ago
• invokethreatguy / CSASC
  ☆52Updated this week
• infosecn1nja / e2modrewrite
  Convert Empire profiles to Apache mod_rewrite scripts
  ☆27Updated 5 years ago
• vysecurity / ShellcodeConversion
  A collection of shell code conversion scripts that I have written over time for repetitive tasks
  ☆18Updated 5 years ago
• securemode / Get-DefenderExcludes
  ☆20Updated this week
• caseysmithrc / OddJob
  ☆11Updated this week
• secgroundzero / tetanus
  Helper script for mangling CS payloads
  ☆52Updated 5 years ago
• anthemtotheego / SharpNado
  ☆69Updated 5 years ago
• vysecurity / Invoke-ProcessScan
  Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.
  ☆42Updated 7 years ago
• rmdavy / AmsiPEBWalkVBA
  Walking the PEB in VBA
  ☆22Updated 4 years ago
• vysecurity / EmpireAMSI
  ☆13Updated 3 years ago
• rvrsh3ll / Sharp-Suite
  My musings with C#
  ☆28Updated last year
• G0ldenGunSec / wmiServSessEnum
  .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems
  ☆32Updated 4 years ago
• v1ado / HIPS_LIPS
  Community maintained list of most popular HIPS service and process names on a Windows Platform.
  ☆43Updated 2 years ago
• johnjohnsp1 / AllTheThings
  Includes 5 Known Application Whitelisting/ Application Control Bypass Techniques in One File.
  ☆31Updated 8 years ago
• curtbraz / Invoke-NeutralizeAV
  Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting
  ☆41Updated 5 years ago
• rvrsh3ll / MSSQLUDPScanner
  Discover MSSQL Instances via UDP Scanning
  ☆23Updated 5 years ago
• OmerYa / Babel-Shellfish
  Babel-Shellfish deobfuscates and scans Powershell scripts on real-time right before each line execution.
  ☆41Updated 5 years ago
• kmkz / Sources
  Random source codes
  ☆25Updated 4 years ago