Awesome-CobaltStrike
zer0yu/awesome-cobaltstrikeList of Awesome CobaltStrike Resources
command-and-controlcurated-resourceseducation+7
4.5k
zer0yu/awesome-cobaltstrikeList of Awesome CobaltStrike Resources
tihanyin/pssw100avbA list of useful Powershell scripts with 100% AV bypass (At the time of publication).
med0x2e/executeassemblyLoad/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…
beetlechunks/redsailsRedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk:…
ivan-sincek/powershell-reverse-tcpPowerShell scripts for communicating with a remote host.
m4sc3r4n0/avoidzAvoidz tool to bypass most A.V softwares
wecooperate/imonitorsdkThe world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能，…
idov31/novahypervisorWindows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compatible with…
bishopfox/imperva_gzip_waf_bypassExploit for Imperva Cloud WAF bypass using gzip Content-Encoding header to evade WAF rules on HTTP POST requests. Includes detection script and…
h3xduck/umbraA LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.
immunit/xipXIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.
c0oki3s/veilgateAsymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-consistent…
hantwister/fakedellomA fake host that can be "managed" by Dell OMSA, getting you past the login screen.
d4vinci/dr0p1t-frameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
synacktiv/amsi-bypassLists of AMSI triggers (VBA, JScript / VBScript)
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
klezvirus/syswhispers3SysWhispers on Steroids - AV/EDR evasion via direct system calls.
luemmelsec/pentest-tools-collectionCurated collection of offensive security tools and commands for Active Directory attacks, C2, privilege escalation, obfuscation, and web pentesting.