Adrenaline
atomiczsec/adrenalineC2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automation.
command-and-controldefensive-toolsinformation-gathering+7
atomiczsec/adrenalineC2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automation.
duyduongduyduong/cve-2024-4577-exploitation-asyncrat-deployment-dfir-investigationInvestigation of CVE-2024-4577 exploitation and AsyncRAT deployment with DFIR artifacts, IoCs, and detection guidance.
luemmelsec/pentest-tools-collectionCurated collection of offensive security tools and commands for Active Directory attacks, C2, privilege escalation, obfuscation, and web pentesting.
beigeworm/badusb-files-for-flipperzeroA Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.
jssngc/harpytoolsAutomated Active Directory post-exploitation toolkit for Kerberos ticket extraction, NTLM relay attacks, and lateral movement via NetExec, Impacket,…
aelshimony-cloud/openwire-cve-2023-46604-investigationIncident response walkthrough analyzing CVE-2023-46604 exploitation of Apache ActiveMQ via OpenWire, including PCAP analysis, IOC identification, and…
activecm/ritaReal Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
ry-allan/tanstack-compromise-checkerDetects CVE-2026-45321 (TanStack supply chain compromise) and Mini Shai-Hulud worm artifacts. Scans node_modules, lockfiles, persistence hooks…
shellkraft/ledgerAn aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…
rasta-mouse/crystal-loadersA small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike
jonstratton/selenium-node-takeover-kitA collection of selenium tests that might aid it takeover of a selenium node
paranoidninja/brc4-bof-artilleryCollection of Brute Ratel C4 BOFs for Windows post-exploitation: process memory access, NetNTLMv2 hash retrieval, contact harvesting, and…
kiexitdispatcher/goredops🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on…
i-am-jakoby/powershell-for-hackersThis repository is a collection of powershell functions every hacker should know
edu0x01/hack-toolsProject that brings together several pentest tools
outflanknl/c2-tool-collectionA collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.
rvrsh3ll/azure-app-toolsCollection of tools to use with Azure Applications
zer0yu/awesome-cobaltstrikeList of Awesome CobaltStrike Resources