
sliver
Adversary Emulation Framework

Adversary Emulation Framework

The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).

Kali365 - EvilTokens Replica

Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.

Kernel-mode hook that intercepts, decrypts, and nullifies BEDaisy-to-service report traffic to suppress anti-cheat detection on UEFI and non-UEFI…

Tools that trigger False Positive AV alerts

An information security preparedness tool to do adversarial simulation.

Red Team K8S Adversary Emulation Based on kubectl

Purple-team telemetry & simulation toolkit.

PoCs and tools for investigation of Windows process execution techniques

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers…

Purple Team Exercise Framework

A guided mutation-based fuzzer for ML-based Web Application Firewalls

Spawns macOS programs through launchd's private XPC interface without execing them, making EDR record launchd as parent. Supports one-shot,…