wsummerhill / C2_RedTeam_CheatSheets
Useful C2 techniques and cheatsheets learned from engagements
☆458Updated 3 months ago
Alternatives and similar repositories for C2_RedTeam_CheatSheets:
Users that are interested in C2_RedTeam_CheatSheets are comparing it to the libraries listed below
- Materials for the workshop "Red Team Ops: Havoc 101"☆362Updated 3 months ago
- An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer☆704Updated last year
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆560Updated 6 months ago
- Dump NTDS with golden certificates and UnPAC the hash☆629Updated 9 months ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆504Updated 9 months ago
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆489Updated 2 months ago
- Kill AV/EDR leveraging BYOVD attack☆333Updated last year
- MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.☆501Updated 5 months ago
- A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) wit…☆508Updated 10 months ago
- ☆405Updated last year
- Ask a TGS on behalf of another user without password☆467Updated 5 months ago
- Amsi Bypass payload that works on Windwos 11☆374Updated last year
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆557Updated 5 months ago
- Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel☆588Updated 6 months ago
- Protected Process Dumper Tool☆527Updated last year
- From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller☆408Updated last week
- Collection of OPSEC Tradecraft and TTPs for Red Team Operations☆278Updated 3 months ago
- Simulate the behavior of AV/EDR for malware development training.☆460Updated 11 months ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆453Updated 2 years ago
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆541Updated 6 months ago
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆378Updated last year
- Creating a repository with all public Beacon Object Files (BoFs)☆443Updated last year
- A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.☆675Updated last week
- Just another Powerview alternative☆543Updated this week
- ☆223Updated 2 years ago
- BOF for Kerberos abuse (an implementation of some important features of the Rubeus).☆408Updated 2 months ago
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆383Updated 7 months ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆383Updated 9 months ago
- Kerberoast with ACL abuse capabilities☆381Updated last month
- Partial python implementation of SharpGPOAbuse☆379Updated 10 months ago