Skip to content
View DrewBe's full-sized avatar

Block or report DrewBe

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Go 7,164 703 Updated Mar 12, 2024

Currently not updated for WMIEvent module...

PowerShell 262 34 Updated Feb 23, 2016

PowerForensics provides an all in one platform for live disk forensic analysis

C# 1,442 281 Updated Nov 16, 2023

Open Source Security Events Metadata (OSSEM)

Python 1,299 209 Updated Feb 27, 2023

The Hunting ELK

Jupyter Notebook 3,930 688 Updated Jun 1, 2024

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

PowerShell 656 145 Updated Aug 19, 2019

Automated, Collection, and Enrichment Platform

PowerShell 325 61 Updated Nov 14, 2019

Python Script to access ATT&CK content available in STIX via a public TAXII server

Python 571 120 Updated Dec 19, 2025
Python 173 35 Updated Jan 31, 2018

SubShell is a python command shell used to control and execute commands through HTTP requests to a webshell. SubShell acts as the interface to the remote webshells.

Python 74 14 Updated Nov 6, 2016

SharpSploit is a .NET post-exploitation library written in C#

C# 1,886 318 Updated Aug 12, 2021

A collection of Red Team focused tools, scripts, and notes

PowerShell 1,146 196 Updated Nov 19, 2024

PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.

JavaScript 57 10 Updated Nov 19, 2024

The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.

HTML 373 77 Updated Nov 19, 2024

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

C# 957 147 Updated Nov 18, 2020

SMB Named Pipe shell

PowerShell 69 12 Updated Nov 19, 2024

Lockless allows for the copying of locked files.

C# 255 58 Updated Apr 30, 2021

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

C# 1,445 249 Updated Jun 27, 2024

Trying to tame the three-headed dog.

C# 5,126 897 Updated May 21, 2026

DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malwar…

Python 247 28 Updated Nov 19, 2024

A Django application to help red team operators manage a library of domain names

Python 166 33 Updated May 24, 2023

The SpecterOps project management and reporting engine

Python 1,889 253 Updated Aug 13, 2026

Convert Cobalt Strike profiles to modrewrite scripts

Python 607 116 Updated Jan 30, 2023

Resources for Windows exploit development

1,661 321 Updated Dec 20, 2021

Wiki to collect Red Team infrastructure hardening resources

4,513 906 Updated Oct 1, 2025

A curated list of awesome social engineering resources.

4,219 496 Updated Apr 5, 2023

Collection of resources related to phishing

168 28 Updated Jun 12, 2021

Customized Kali Linux - Ansible playbook

Python 67 22 Updated Dec 7, 2020

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

3,622 645 Updated Mar 14, 2026
Next