Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Coba…

Microsoft Entra ID Security Assessment Tool

Weaponizing DCOM for NTLM Authentication Coercions

Spartacus DLL/COM Hijacking Toolkit

A curated list of awesome Python frameworks, with a bias towards data and machine learning

Salesforce Recon and Exploitation Toolkit

Academic purposes only. Attack against Salesforce lightning with guest privilege.

Tool for Active Directory Certificate Services enumeration and abuse

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

A python script that finds endpoints in JavaScript files