Red Team

Using Apache mod_rewrite as a redirector to filter C2 traffic for Cobalt Strike servers.

Sysreptor offers a customizable reporting solution for offensive security assessments.

Sysreptor provides a customizable reporting platform for pentesters and red teamers to efficiently document security assessments.

A pocket reference guide providing various options for navigating and pivoting through different environments and situations.

Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.

SharpC2 is a C#-based Command and Control framework that provides remote access capabilities for penetration testing and red team operations.

Sysreptor offers a customizable reporting solution for penetration testing and red teaming.

A week-long series of articles and talks on evading Microsoft Advanced Threat Analytics (ATA) detection

Parrot Security OS is a comprehensive, secure, and customizable operating system for cybersecurity professionals, offering over 600+ tools and utilities for red and blue team operations.

Covenant is a collaborative .NET command and control framework designed for red team operations and offensive security engagements.

A command line tool that generates randomized malleable C2 profiles for Cobalt Strike to vary command and control communication patterns.

Sysreptor offers a customizable reporting solution for pentesters and red teamers to enhance security documentation.

The Hacker News is a leading cybersecurity news platform providing updates, insights, and information to professionals and enthusiasts in the field.

Pwndrop is a self-deployable file hosting service for red teamers, allowing easy upload and sharing of payloads over HTTP and WebDAV.

EvilClippy is a cross-platform tool that creates malicious MS Office documents with hidden VBA macros and evasion techniques for penetration testing and red team operations.

Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.

CobaltBus integrates Cobalt Strike with Azure Service Bus to create covert C2 communication channels for red team operations.

A post-exploitation framework designed to operate covertly on heavily monitored environments.

Anti-forensics tool for Red Teamers to erase footprints and test incident response capabilities.

Documentation of an AWS IAM privilege escalation technique that exploits the iam:CreatePolicyVersion permission to gain elevated access through policy manipulation.

MITRE Caldera™ is an automated adversary emulation platform built on the MITRE ATT&CK framework that supports red team operations and incident response activities through a modular C2 server and plugin architecture.

Mortar is an evasion technique to defeat and divert detection and prevention of security products, including AV, EDR, and XDR solutions.

A reconnaissance tool that analyzes expired domains for categorization, reputation, and Archive.org history to identify candidates suitable for phishing and C2 operations.

RedGuard is a C2 front flow control tool that helps evade detection by security systems through traffic filtering and redirection capabilities.