0xsyr0

OSCP Cheat Sheet

This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

From Zero To Hero

A proof-of-concept shellcode loader demonstrating advanced evasion techniques for security research.

This repository is about books I recommend in terms of cybersecurity.

Wordlist to crack .zip-file password

A summary of the most abbreviations I encountered so far

Field guide to gather low-hanging fruits

Obsidian Vault for note taking during the OSCP exam.

Python implementation of two famous JavaScript payloads for Bug Bounty.

No description.

A collection of self-contained, offline security audit checklists for penetration testers and red teamers. Each checklist covers a distinct target environment with ordered checks, ready-to-run commands, and built-in tooling support.

This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.

Obsidian snippets for generating engagements reports

A list of Cheatsheet compiled by CloudBreach Team

Small and highly portable detection tests based on MITRE's ATT&CK.

Protected web shell for offensive security purposes.

Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

Security awareness tooling demonstrating VSCode extension abuse, reverse shell delivery, and Firefox session cookie theft — for authorised penetration testing and internal security awareness demonstrations only.

A collection of useful nuclei templates

Adversary Emulation Framework

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

A curated collection of AI-assisted exploit scripts developed during penetration testing engagements, red team operations, and CTF competitions.

A curated collection of AI-assisted scripts for offensive security operations, penetration testing, and red team engagements.

This repository contains files for the Python programming series of Alh4zr3d on YouTube.

bindshell project for understanding purposes

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks .

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

The Havoc Framework

Various tips & tricks

Over 50 of The Most Deceptive Phishing Templates, Pages & Links for GoPhish!

My experiments in weaponizing Nim (https://nim-lang.org/)

🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language. (In Construction)

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

PowerSploit - A PowerShell Post-Exploitation Framework

A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its gRPC service no proxies or protocol reimplementations required.

A dark-themed minimalistic static site for cybersecurity professionals, built for GitHub Pages.

Merged exploit to abuse SSRF for delivering RCE through websockets.

Mythic C2 wrapper for NimSyscallPacker

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

Group Policy Objects manipulation and exploitation framework

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder

Backdooring Claude Code via hooks in settings.json. Authorized use only!

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

A collection of Azure AD/Entra tools for offensive and defensive security purposes

✨ Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Rusty Armory - Beacon Object Files (BOFs) in Rust (Codename: Armory)

No description.

No description.

Open-source multi-purpose remote access tool for Microsoft Windows

This project provides some code examples of Zig for malwares, hacking, and red teaming.

No description.

ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.

No description.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Open-Source Phishing Toolkit

Terms of Use Conditional Access M365 Evilginx Phishlet

A flexible, AI powered C2 framework built with operators in mind

A powerful, modular, lightweight and efficient command & control framework written in Nim.

Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

No description.

Sliver CheatSheet for OSEP

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

No description.

PowerShell runner for executing malicious payloads in order to bypass Windows Defender.

No description.

No description.

slides for talk given during uscg 2023 combine

No description.

Rust Weaponization for Red Team Engagements.

No description.

OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Small Python script to backup available repositories on GitHub within a users profile.

A dark-themed minimalistic static site for cybersecurity professionals, built for GitHub Pages.

Downloads the latest artifact from a pipeline.

No description.

KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.

Decentralized C2 framework built on libp2p

The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run 11 advanced detection engines to uncover hidden payloads.

RoguePlanet Windows Defender Vulnerability

Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Stealthy Linux Kernel Rootkit for modern kernels (6x)

A Proof-of-Concept bootkit inspired by Petya ransomware, written in Assembly, C, and C++

A modern alternative Web-UI for the Mythic Command and Control Server

CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys

Repository hosting windows defender DOS tool

Repository hosting the bluehammer vulnerability

The Red Sun vulnerability repository

GreenPlasma Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability

YellowKey Bitlocker Bypass Vulnerability

SMB deny-share handle research tool. Lock files on an enterprise share with zero writes, zero encryption, and zero alerts in any behavioral defense. Standard user. One API call. No CVE.

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution

Automated Nim shellcode stager builder for Sliver C2 - cross-compiles a Windows evasion payload in one command. For authorized red team engagements only.

Boot-to-Breach red team lab on AWS. Mythic, Sliver, and Havoc C2 behind a production-style Apache redirector. Deployed via Terraform, to be used for training/self hosted environments.

This cheatsheet maps common impacket workflows to their modern alternatives

Red team Interview Questions

Generate malware with AI

Fawkes is a golang Mythic C2 Agent exclusively written by AI.

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

A modern GoPhish fork with improved tracking accuracy and smarter detection.

No description.

A collaborative, multi-platform, red teaming framework

Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.

Self hosted phishing framework

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Stealthily inject shellcode into an executable

A fork of the great TokenTactics with support for CAE and token endpoint v2

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Azure Security Resources and Notes

Tools for Kerberos PKINIT and relaying to AD CS

Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence

reverse engineered and reimplemented from an example in the wild. bypasses proofpoint and EDRs

Payload Development Framework

A Mythic Agent written in PIC C.

This repo contains C/C++ snippets that can be handy in specific offensive scenarios.

Multilayered AV/EDR Evasion Framework

🧙‍♂️ Node JS C2 for backdooring vulnerable Electron applications

ScareCrow - Payload creation framework designed around EDR bypass.

Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500)

evilginx3 + gophish

Mirror of Shadowbrokers release from https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation

Cobalt Strike HTTPS beaconing over Microsoft Graph API

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

AdaptixFramework Extension Kit

real time face swap and one-click video deepfake with only a single image

Our Tips&Tricks

A proof‑of‑concept C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and result collection. By tunneling through ngrok, you can quickly expose your C2 server to the public internet for rapid testing and demonstration.

A cross platform library to write offensive and defensive security tools in Go

macos stealer poc

A command and control framework written in rust.

A Mythic agent for Windows written in C

All the things that can be used as a C2.

Command Augmentation support for BOFs and .NET assemblies across agents

This repository contains my complete resources and coding practices for malware development using Rust 🦀.

Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine

Crypter, binder & downloader with native & .NET stub, evasive by design, user friendly UI

Kerberoast with ACL abuse capabilities

Assorted scripts and one off things

Beagle in the Middle

No description.

Enable or Disable TokenPrivilege(s)

Phishing with a fake reCAPTCHA

Demonized Shell is an Advanced Tool for persistence in linux.

Side-by-side comparison of the Windows and Linux (GNU) Loaders

DeimosC2 is a Golang command and control framework for post-exploitation.

rcat

A small reverse shell for Linux & Windows

No description.

No description.

Post-exploitation agent for Merlin

Performing Indirect Clean Syscalls

Golang weaponization for red teamers.

Collection of Offensive C# Tooling

Covenant is a collaborative .NET C2 framework for red teamers.

A light-weight first-stage C2 implant written in Nim.