Discover outflanknl/DoH_c2_Trigger Open Source project

Stars
54
Rank 544,902 (Top 11 %)
Language
PowerShell
Created about 6 years ago
Updated about 6 years ago

outflanknl

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Python

2,342

EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

2,095

Dumpert

LSASS memory dumper using direct system calls and API unhooking.

1,464

C2-Tool-Collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

1,090

Invoke-ADLabDeployer

Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.

PowerShell

477

SharpHide

Tool to create hidden registry keys.

463

Spray-AD

A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.

C++

419

PrintNightmare

331

Ps-Tools

Ps-Tools, an advanced process monitoring toolkit for offensive operations

327

Excel4-DCOM

PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)

PowerShell

321

Recon-AD

Recon-AD, an AD recon tool based on ADSI and reflective DLL’s

C++

312

InlineWhispers

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)

Assembly

299

Scripts

Small scripts that make life better

JavaScript

289

FindObjects-BOF

A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or process handles.

266

WdToggle

A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.

213

edr-internals

Tools for analyzing EDR agents

C++

191

Zipper

Zipper, a CobaltStrike file and folder compression utility.

189

HelpColor

Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type

188

TamperETW

PoC to demonstrate how CLR ETW events can be tampered.

186

Presentations

Presentation material presented by Outflank team members at public events.

177

NetshHelperBeacon

Example DLL to load from Windows NetShell

C++

174

Net-GPPPassword

.NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.

163

external_c2

POC for Cobalt Strike external C2

122

Training-MSOfficeOffensiveTradecraft

unmanaged-dotnet-patch

Modify managed functions from unmanaged code

C++

PasswordDump2ELK

Clean public password dump files and store in ELK

Shell

RedELK-workshop

Exploits

Exploits developped by Outflank B.V. team members

Python

RedFile

Serving files with conditions, serverside keying and more.

Python

Invoke-Templator

A PowerShell script to parse the docx/docm file format and update the template location.

PowerShell

outflanknl/DoH_c2_Trigger

outflanknl

Reviews

Repository Details

More Repositories