VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at the forefront of the field. It serves as a central repository…

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to …

Defund the Police.

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

A tool for checking if MFA is enabled on multiple Microsoft Services

Malware samples, analysis exercises and other interesting resources.

This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

A centralized resource for previously documented WDAC bypass techniques

game of active directory

This code bypass AMSI by setting JE instruction to JNE in assembly of amsi.dll file

This repo contains some Amsi Bypass methods i found on different Blog Posts.

AV/EDR evasion via direct system calls.

A new AMSI Bypass technique using .NET ALI Call Hooking.

A Library of various cybersecurity resources

This repo is aim to compile all Flare-On challenge's binaries. Update: 2014 -2022.

Collection of Beacon Object Files

Subdomain Takeover tool written in Go

PE loader with various shellcode injection techniques

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

Notes on responding to security breaches relating to Azure AD

Digging Deeper....

Some notes and examples for cobalt strike's functionality