Koi
b3rt1ng/koiMulti-session reverse shell handler with PTY upgrade, post-exploitation modules, Layer 3 tunneling, payload obfuscation for EDR evasion, session…
command-and-controlids-ips-evasionlateral-movement+9
37
b3rt1ng/koiMulti-session reverse shell handler with PTY upgrade, post-exploitation modules, Layer 3 tunneling, payload obfuscation for EDR evasion, session…
shadowy-pycoder/go-http-proxy-to-socksCLI MITM proxy that converts SOCKS4/SOCKS5 into HTTP/HTTPS/HTTP2/HTTP3 proxy with transparent TCP/UDP redirection, ARP/NDP/DNS spoofing, traffic…
corelight/corelightforsecopsChronicle parser for CORELIGHT and related information.
g0dse11/detecttraceOpen-source detection engineering tool that traces security detections end to end and identifies the first failing stage.
cytopia/pwncatpwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully…
gvcoder09/nodpiLocal proxy that bypasses Deep Packet Inspection by fragmenting TLS ClientHello packets, enabling access to blocked websites without requiring…
nccgroup/yaml2yaraGenerate bulk YARA rules from YAML input
lsecqt/portforwarderTCP Port Forwarding Utility on C
zimawhit3/bitmancerNim Library for Offensive Security Development
omerya/invisi-shellHide your Powershell script in plain sight. Bypass all Powershell security features
sigmahq/sigma-cliThe Sigma command line interface based on pySigma
sigmahq/pysigma-backend-opensearchpySigma OpenSearch backend
sigmahq/pysigmaPython library to parse and convert Sigma rules into queries (and whatever else you could imagine)
corelight/community-id-specAn open standard for hashing network flows into identifiers, a.k.a "Community IDs".
0sm0s1z/invoke-selfsignedwebrequestThis repo exists as a quick and dirty arsenal of methods and scripts to subvert .NET SSL/TLS certificate validation in PowerShell and press on with…
gmh5225/haraldAn in-memory minimal CPU for agnostic on-the-fly protocols creation
