Chris Ross

RemoteRecon. Remote Recon and Collection

RandomPS-Scripts. PowerShell Scripts focused on Post-Exploitation Capabilities

macOSTools. macOS Offensive Tools

Random-CSharpTools. Collection of CSharp Assemblies focused on Post-Exploitation Capabilities

raven. CobaltStrike External C2 for Websockets

poseidon. Apfell Golang macOS/Linux/Windows implant

EmailRaider. Powershell MS Outlook enumeration and phishing tool

goesf. Golang command line tool for the macOS Endpoint Security Framework

xpcutil. Golang Tool to interact with Launchd and other services with XPC

Leviathan. A simple, quick, and dirty websocket shell for PowerShell.

apfell-chrome-extension-c2server. Apfell C2 Server for the Google Chrome Extension Payload

apfell-chrome-ext-payload. Apfell POC Chrome Extension Payload

s3_search. Command line tool to search s3 buckets and match filenames or file contents against keywords or regex strings

xpc-launchd-submit. C

WebCam_Dll. Capture Webcam Reflective Dll

PowerJax. Shellcode Injection with Powershell

rust_sys_call_loader. Rust

gophish. Open-Source Phishing Toolkit

CimSweep. CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

realm. Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.

keyctl. A Go-lang interface to the linux kernel keyring api

hushcon_poc. Simple Shellcode development/injection on macOS

CursedChrome. Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

windows-operating-system-archaeology. windows-operating-system-archaeology @Enigma0x3 @subTee

realvnc-sys. Rust bindings for RealVNC SDK (Generated with bindgen)

cliws. Cross platform interactive bind/reverse PTY shell

BSidesDC2016. Custom scripts released for BSidesDC 2016

poseidonC2. External C2 server for poseidon

mythic_sync. Standalone Mythic C2 operation logging script for Ghostwriter v2.0+

chisel. A fast TCP/UDP tunnel over HTTP

Mythic. A collaborative, multi-platform, red teaming framework

Socks5. Simpe socks 5 proxy server

Reflective-Driver-Loader. C++

CRX3-Creator. Python

Inveigh. Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB

MacOS_VBA_Macro. Example VBA Macro for MacOS Mojave

ASM-Course. Assembly

slacking. Modern Slack C++ 11 library for communicating with the Web Slack API

shellcc. Building optimized shellcode using GCC. Suited for learning assembly and playing with the ABI

Empire-GUI. Empire client application

Unrootless-Kext. A Kext that can be used to disable Rootless in OS X El Capitan/macOS Sierra. You need to sign it OR use an exploit to make OS X load it.

FlavorTown. Various ways to execute shellcode

AlmondRocks. In motherland, target network calls you!