Mr-Un1k0d3r/SCT-obfuscator

Stars
142
Rank 258,495 (Top 6 %)
Language
Python
Created over 7 years ago
Updated over 7 years ago

Mr-Un1k0d3r/SCT-obfuscator

Mr-Un1k0d3r

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Cobalt Strike SCT payload obfuscator

SCT-obfuscator

SCT payload obfuscator. Rename variables and change harcoded char value to random one.

Usage

$ python SCT-obfuscator.py payload.sct
COM Scriptlet payload (SCT file) obfuscator
Mr.Un1k0d3r - RingZer0 Team 2017


[+] new payload was saved to payload.sct.edit

Credit

Mr.Un1k0d3r RingZer0 Team

https://ringzer0team.com

EDRs

PowerLessShell

Run PowerShell command without invoking powershell.exe

DKMC

DKMC - Dont kill my cat - Malicious payload evasion tool

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

RedTeamPowershellScripts

Various PowerShell scripts that may be useful during red team exercise

MaliciousMacroGenerator

Malicious Macro Generator

ThunderShell

Python / C# Unmanaged PowerShell based RAT

RedTeamCSharpScripts

C# Script used for Red Team

RedTeamCCode

Red Team C code repo

CatMyPhish

Search for categorized domain

PoisonHandler

lateral movement techniques that can be used during red team exercises

MaliciousClickOnceGenerator

Quick Malicious ClickOnceGenerator for Red Team

ADHuntTool

official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

Windows-SignedBinary

.NetConfigLoader

.net config loader

Shellcoding

Shellcoding utilities

ATP-PowerShell-Scripts

Microsoft Signed PowerShell scripts

WindowsDllsExport

A list of all the DLLs export in C:\windows\system32\

AMSI-ETW-Patch

Patch AMSI and ETW

DLLsForHackers

Dll that can be used for side loading and other attack vector.

MaliciousDLLGenerator

DLL Generator for side loading attack

RedTeamScripts

Repo with various Red Team scripts

Elevate-System-Trusted-BOF

Cookie-Graber-BOF

C or BOF file to extract WebKit master key to decrypt user cookie

SPFAbuse

SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

RemoteProcessInjection

C# remote process injection utility for Cobalt Strike

Base64-Obfuscator

Simple PowerShell Base64 encoder to avoid detection of your malicious payload

SearchIPOwner

Search public IP owner through ARIN

RedTeamFSharp

Red Team Toolset written in F# (Experimental)

SideChannelAttack

Side Channel script

BOFCode

Bunch of BOF files

blog.mr.un1k0d3r.com

Mr.Un1k0d3r.com blog

MsGraphFunzy

Scripts to interact with Microsoft Graph APIs