Red Team Cheatsheet in constant expansion.
☆1,305Dec 28, 2023Updated 2 years ago
Alternatives and similar repositories for Awesome-RedTeam-Cheatsheet
Users that are interested in Awesome-RedTeam-Cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,424Oct 27, 2023Updated 2 years ago
- A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.☆6,774May 27, 2026Updated 4 months ago
- Tools & Interesting Things for RedTeam Ops☆2,307Feb 10, 2026Updated 8 months ago
- Win32 and Kernel abusing techniques for pentesters☆981Sep 3, 2023Updated 3 years ago
- evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)☆1,513Dec 21, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.☆1,936Oct 29, 2025Updated 11 months ago
- Automation for internal Windows Penetrationtest / AD-Security☆3,703Aug 28, 2025Updated last year
- Azure Security Resources and Notes☆1,786Feb 17, 2026Updated 8 months ago
- Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.☆1,611Nov 21, 2025Updated 10 months ago
- Some notes and examples for cobalt strike's functionality☆1,140Feb 8, 2022Updated 4 years ago
- Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab☆2,339Apr 12, 2024Updated 2 years ago
- A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.☆2,333Apr 24, 2026Updated 5 months ago
- ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound via BOFHound, and also supports full-ob…☆1,105Jul 10, 2026Updated 3 months ago
- A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT S…☆3,027Jun 27, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.☆1,572Aug 20, 2024Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆1,439Nov 22, 2023Updated 2 years ago
- The swiss army knife of LSASS dumping☆2,140Sep 17, 2024Updated 2 years ago
- Red Teaming Tactics and Techniques☆4,717Jun 13, 2026Updated 4 months ago
- My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+☆1,109Apr 19, 2023Updated 3 years ago
- A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.☆2,773Jul 6, 2025Updated last year
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,228Sep 30, 2026Updated 2 weeks ago
- Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀☆1,180Oct 21, 2024Updated last year
- BloodyAD is an Active Directory Privilege Escalation Framework☆2,324Oct 3, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆3,255May 13, 2023Updated 3 years ago
- Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.☆979Apr 8, 2025Updated last year
- Materials for the workshop "Red Team Ops: Havoc 101"☆404Oct 6, 2024Updated 2 years ago
- A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.☆463Mar 25, 2024Updated 2 years ago
- Awesome list of step by step techniques to achieve Remote Code Execution on various apps!☆1,941Oct 7, 2023Updated 3 years ago
- ☆790Oct 17, 2023Updated 3 years ago
- KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…☆1,691Aug 6, 2022Updated 4 years ago
- ☆1,849Aug 30, 2024Updated 2 years ago
- Awesome EDR Bypass Resources For Ethical Hacking☆1,595Jan 26, 2026Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Syscall Shellcode Loader (Work in Progress)☆1,283May 8, 2024Updated 2 years ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,884Aug 18, 2023Updated 3 years ago
- This map lists the essential techniques to bypass anti-virus and EDR☆3,479Mar 28, 2025Updated last year
- Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs☆1,232Aug 18, 2023Updated 3 years ago
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆2,203Nov 28, 2024Updated last year
- Another Windows Local Privilege Escalation from Service Account to System☆974Nov 12, 2022Updated 3 years ago
- The Havoc Framework☆8,504Dec 18, 2025Updated 9 months ago