Outflank B.V.

Repositories

• RedELK

  Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

  security elasticsearch kibana logstash monitoring siem elastic
  CSS 212 1,259 13 (7 issues need help) 0 Updated Aug 20, 2020

• Presentations
  27 107 0 0 Updated Jun 5, 2020

• EvilClippy

  A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

  excel word malware vba ms-office macro pcode
  C# GPL-3.0 196 921 5 0 Updated May 13, 2020

• TamperETW

  PoC to demonstrate how CLR ETW events can be tampered.
  C 17 79 0 0 Updated Mar 26, 2020

• Ps-Tools

  Ps-Tools, an advanced process monitoring toolkit for offensive operations
  C 56 190 0 0 Updated Mar 11, 2020

• Spray-AD

  A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.
  C++ 34 240 1 0 Updated Feb 23, 2020

• Scripts

  Small scripts that make life better
  JavaScript 60 223 1 0 Updated Jan 27, 2020

• Zipper

  Zipper, a CobaltStrike file and folder compression utility.
  C 39 122 0 0 Updated Jan 18, 2020

• Net-GPPPassword

  .NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.
  C# 27 89 0 0 Updated Dec 18, 2019

• SharpHide

  Tool to create hidden registry keys.
  C# 61 260 0 0 Updated Oct 23, 2019

• Recon-AD

  Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
  C++ 34 198 1 0 Updated Oct 20, 2019

• Invoke-Templator

  A PowerShell script to parse the docx/docm file format and update the template location.
  PowerShell 5 14 0 0 Updated Oct 15, 2019

• RedFile

  A flask wsgi application that serves files with intelligence, good for serving conditional RedTeam payloads
  Python BSD-3-Clause 15 44 0 0 Updated Aug 24, 2019

• Dumpert

  LSASS memory dumper using direct system calls and API unhooking.
  C 116 464 3 1 Updated Jul 5, 2019

• Excel4-DCOM

  PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)
  PowerShell 69 247 0 0 Updated Mar 26, 2019

• Invoke-ADLabDeployer

  Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
  PowerShell BSD-3-Clause 66 386 0 0 Updated Feb 16, 2019

• DoH_c2_Trigger

  Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/
  PowerShell 19 46 0 0 Updated Oct 25, 2018

• PasswordDump2ELK

  Clean public password dump files and store in ELK
  Shell 12 27 0 0 Updated Jan 24, 2018

• external_c2

  POC for Cobalt Strike external C2
  C 30 78 0 0 Updated Sep 17, 2017

• Exploits

  Exploits developped by Outflank B.V. team members
  Python 5 10 0 0 Updated Jan 26, 2017

• NetshHelperBeacon

  Example DLL to load from Windows NetShell
  C++ 28 102 0 0 Updated Sep 26, 2016