redteam-tools

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Cyber Security ALL-IN-ONE Platform

Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

一款适用于红蓝对抗中的仿真钓鱼系统

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

Dangerously fast DNS/network/port scanner

一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

a tool to help operate in EDRs' blind spots

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

A PowerShell armoury for security guys and girls

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

A tool that shows detailed information about named pipes in Windows

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.

Local privilege escalation via PetitPotam (Abusing impersonate privileges).