Skip to content
View tillstuder's full-sized avatar
:shipit:
:shipit:

Block or report tillstuder

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Starred repositories

108 stars written in Go
Clear filter

ScareCrow - Payload creation framework designed around EDR bypass.

Go 2,858 521 Updated Aug 18, 2023

Terraform provider plugin for proxmox

Go 2,713 590 Updated Nov 2, 2025

Six Degrees of Domain Admin

Go 2,524 254 Updated Nov 11, 2025

Adversary tradecraft detection, protection, and hunting

Go 2,392 202 Updated Oct 14, 2025

A tool to abuse Exchange services

Go 2,272 366 Updated Jun 10, 2024

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Go 2,186 271 Updated Nov 1, 2025

Writing a container in a few lines of Go code, as seen at DockerCon 2017 and on O'Reilly Safari

Go 1,952 332 Updated Aug 12, 2025

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

Go 1,786 224 Updated Jan 6, 2023

go-audit is an alternative to the auditd daemon that ships with many distros

Go 1,648 162 Updated Nov 6, 2025

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

Go 1,462 198 Updated Aug 18, 2023

Peirates - Kubernetes Penetration Testing tool

Go 1,385 123 Updated Aug 8, 2025

Plot your repository stars over time.

Go 1,371 138 Updated Nov 10, 2025

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

Go 1,177 164 Updated Apr 16, 2025

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

Go 1,076 135 Updated Apr 5, 2022

Auditing for TLS certificates (Go code)

Go 1,057 278 Updated Nov 4, 2025

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Go 1,041 83 Updated Nov 9, 2024

A framework for constructing self-spreading binaries

Go 1,018 103 Updated Nov 23, 2023

Open Source Package Analysis

Go 856 63 Updated Apr 16, 2025

Because AV evasion should be easy.

Go 828 81 Updated Nov 28, 2024

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log ag…

Go 817 57 Updated Feb 17, 2025

C2 infrastructure over Microsoft Teams.

Go 728 117 Updated Jan 15, 2025

Galah: An LLM-powered web honeypot.

Go 608 59 Updated Jul 24, 2025

Protected Process Dumper Tool

Go 568 61 Updated Aug 30, 2023

Hershell is a simple TCP reverse shell written in Go.

Go 530 86 Updated Jul 15, 2019

Kubernetes focused container assessment and context discovery tool for penetration testing

Go 469 19 Updated Nov 7, 2025
Go 467 37 Updated Oct 27, 2025

Ransomware simulator written in Golang

Go 452 54 Updated Jun 30, 2022

A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

Go 383 21 Updated Oct 1, 2024

Threatest is a CLI and Go framework for end-to-end testing threat detection rules.

Go 336 25 Updated Apr 29, 2025