Mantvydas Baranauskas

ERC.Xdbg. An Xdbg Plugin of the ERC Library.

awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources

pe_to_shellcode. Converts PE into a shellcode

CallObfuscator. Obfuscate specific windows apis with different apis

Farmer. C#

speakeasy. Windows kernel and user mode emulation.

Alaris. A protective and Low Level Shellcode Loader that defeats modern EDR systems.

macro_pack. macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

TelemetrySourcerer. Enumerate and disable common sources of telemetry used by AV/EDR.

Awesome-CobaltStrike. List of Awesome CobaltStrike Resources

HackSysExtremeVulnerableDriver. HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

CS-Situational-Awareness-BOF. Situational Awareness commands implemented using Beacon Object Files

cs-rdll-ipc-example. Example code for using named pipe output with beacon ReflectiveDLLs

kmdf-keylogger. Keylogger driver for Windows

MemoryModule. Library to load a DLL from memory.

avepoc. some pocs for antivirus evasion

weirdhta. A tool to create obfuscated HTA script.

Covenant. Covenant is a collaborative .NET C2 framework for red teamers.

Checklists. Red Teaming & Pentesting checklists for various engagements

Digital-Signature-Hijack. Binaries, PowerShell scripts and information about Digital Signature Hijacking.

CAPE. Malware Configuration And Payload Extraction

ReaCOM. ReaCOM has got a lot of tools to use and is related to component object model

injection. C++

SharpGPOAbuse. SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

EvilClippy. A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

LethalHTA. Lateral Movement technique using DCOM and HTA

avet. AntiVirus Evasion Tool

Red-Baron. Automate creating resilient, disposable, secure and agile infrastructure for Red Teams

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

DomainCheck. DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.

AggressorCollection. Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors

ExploitCapcom. This is a standalone exploit for a vulnerable feature in Capcom.sys

token-priv. Token Privilege Research

atomic-threat-coverage. Actionable analytics designed to combat threats

ShellcodeLoader. Small tool to load shellcodes or PEs to analyze them

ZeusInjector. An Open Source Windows DLL Injector With All Known Techniques Available

AD-Attack-Defense. Attack and defend active directory using modern post exploitation adversary tradecraft activity

awesome-burp-extensions. A curated list of amazingly awesome Burp Extensions

dns-exe-persistance. C++

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

awesome-windows-security. List of Awesome Windows Security Resources

SQLInjectionWiki. A wiki focusing on aggregating and documenting various SQL injection methods

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

RedELK. Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

ja3. JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

censys-subdomain-finder. ⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

red_team_telemetry. Python

fuxploider. File upload vulnerability scanner and exploitation tool.

gef. GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

creddump. Automatically exported from code.google.com/p/creddump

DoHC2. DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

SharpSploit. SharpSploit is a .NET post-exploitation library written in C#

Internal-Monologue. Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

MailSniper. MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

phishery. An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

luckystrike. A PowerShell based utility for the creation of malicious Office macro documents.

ranger. A tool for security professionals to access and interact with remote Microsoft Windows based systems.

PSSysmonTools. Sysmon Tools for PowerShell

Seatbelt. Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Pentest-and-Development-Tips. A collection of pentest and development tips

Penetration-Testing-Tools. A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

Shellkiller. A killer reverse-shell script that is able to use a lot of techniques to ensure your shell will pop back to you.

ShellPop. Pop shells like a master.

Red-Teaming-Toolkit. This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

redsnarf. RedSnarf is a pen-testing / red-teaming tool for Windows environments

Red-Baron. Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

Red-Teaming-Toolkit. A collection of open source and commercial tools that aid in red team operations.

Injectors. 💉 DLL/Shellcode injection techniques

nishang. Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

ptf. The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

CyberThreatHunting. A collection of resources for Threat Hunters

WinPwnage. UAC bypass, Elevate, Persistence methods

lpeworkshop. Windows / Linux Local Privilege Escalation Workshop

ephemera-miscellany. Ephemera and other documentation associated with the 1337list project.

Infosec_Reference. An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

GTFOBins.github.io. GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

DARKSURGEON. DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.

Red-Team-Infrastructure-Wiki. Wiki to collect Red Team infrastructure hardening resources

awesome-ctf. A curated list of CTF frameworks, libraries, resources and softwares

RedHunt-OS. Virtual Machine for Adversary Emulation and Threat Hunting

pyrebox. Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

UsnJrnl2Csv. Parser for $UsnJrnl on NTFS

ViperMonkey. A VBA parser and emulation engine to analyze malicious macros.

Sherlock. PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

PoshC2_Old. Powershell C2 Server and Implants

aktaion. Aktaion: Open Source ML tool and data samples for Exploit and Phishing Research

DET. (extensible) Data Exfiltration Toolkit (DET)

uac-a-mola. Python

ACE. Automated, Collection, and Enrichment Platform

InjectProc. InjectProc - Process Injection Techniques [This project is not maintained anymore]

awesome-incident-response. A curated list of tools for incident response

demos. Demos of various injection techniques found in malware

asm. Learning assembly for Linux x86_64

Empire. Empire is a PowerShell and Python post-exploitation agent.

impacket. Impacket is a collection of Python classes for working with network protocols.

pysap. pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS, RFC and HDB protocols.

SwipeMenuListView. [DEPRECATED] A swipe menu for ListView.

okhttp. A meticulous HTTP client for the JVM, Android, and GraalVM.

AXStretchableHeaderTabViewController. Stretchable header view + Horizontal swipable tab view

AHKActionSheet. An alternative to the UIActionSheet inspired by the Spotify app.

C-41. C-41 is an application to help people develop film at home by providing a series of "recipes" for photographers to use.

issue-1-lighter-view-controllers. Example project for the 1st issue of objc.io

MVCNetworking. MVCNetworking is a sample that shows how to create a network application using the Model-View-Controller design pattern. Specifically, it displays a photo gallery by getting the gallery's XML description, thumbnails and photos from a web server, and uses Core Data to cache this information locally.

Coffee-Shop-MVC. companion Xcode project for the MVC episode of my iOS design patterns blog series

MGSwipeTableCell. An easy to use UITableViewCell subclass that allows to display swippable buttons with a variety of transitions.

SWTableViewCell. An easy-to-use UITableViewCell subclass that implements a swippable content view which exposes utility buttons (similar to iOS 7 Mail Application)

MCSwipeTableViewCell. :point_up_2: Convenient UITableViewCell subclass that implements a swippable content to trigger actions (similar to the Mailbox app).

MGSwipeTabBarController. Simple swipe tab bar controller for iOS

SwipeView. SwipeView is a class designed to simplify the implementation of horizontal, paged scrolling views on iOS. It is based on a UIScrollView, but adds convenient functionality such as a UITableView-style dataSource/delegate interface for loading views dynamically, and efficient view loading, unloading and recycling.

ios. iPhone app