Red Siege ORG

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

Egress-Assess is a tool used to test egress data detection capabilities

Cobalt Strike HTTPS beaconing over Microsoft Graph API

Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large dataset.

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.

Enumerate Domain Data

Fully modular persistence framework

C# port of WMImplant which uses either CIM or WMI to query remote systems

Hide shellcode by shuffling bytes into a random array and reconstruct at runtime

Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles

Aggressor scripts for phases of a pen test or red team assessment

No description.

Macro-Enabled Excel File Generator (.xlsm) using the EPPlus Library.

Utilities for obfuscating shellcode

No description.

C# program to take a full size screenshot or a recording of the user's desktop. Takes in 0-3 flags

A small POC of using Azure Functions to relay communications. Feel free to add additional functionality beyond this POC!

This repo hosts a poc of how to execute F# code within an unmanaged process

POC for .NET mssql client for accessing database data through beacon

A small .NET compression utility

Hasher is designed to be a tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally. Not meant to crack passwords, but designed for local checks.

No description.

This script generates a groups.xml file that mimics a real GPP to create a new user on domain-joined computers

Scripts for public use that we've randomly written, or have updated from other people's work.

A wrapper around the Proxmark3 client that will alert the user of specific events

This project provides Base64 encoding and decoding functionality to PowerShell within Constrained Language Mode

No description.

No description.

.NET wrapper around LogonUserA to test creds

code for ransomware talks

Quick and dirty installation script for CUDA drivers on Ubuntu 18.04 LTS to save a bit of time.

C# implementation of EyeWitness