OSINT

Passive Discovery

• Amass - https://github.com/OWASP/Amass (Attack Surface Mapping)
• Metabigor - https://github.com/j3ssie/metabigor (Non-API OSINT)

Target User Population Collection

• Linkedin UserEnum - https://github.com/bigb0sss/LinkedinMama

Cloud Recon

• cloud_enum - https://github.com/initstring/cloud_enum
• MicroBurst - https://github.com/NetSPI/MicroBurst (AZURE)
• pacu - https://github.com/RhinoSecurityLabs/pacu (AWS)
• Cloud_Pentest_Cheatsheet - https://github.com/dafthack/CloudPentestCheatsheets

Microsoft (ADFS)

• ADFSpoof - https://github.com/fireeye/ADFSpoof (Forge ADFS security tokens)

C2 Infrastructure

Cobal Strike

• Malleable C2 (Guideline) - CS4.0_guideline.profile

• Beacon Command Cheatsheet - CS Commands

• Cobalt Strike Training Review

  • Part 1

• SharpeningCobaltStrike - https://github.com/cube0x0/SharpeningCobaltStrike

Redirectors

• Domain Fronting - https://www.bamsoftware.com/papers/fronting/

Proxy Infrastructure Setup

• Cloud-proxy - https://github.com/tomsteele/cloud-proxy
• Proxy-ng - https://github.com/jamesbcook/proxy-ng
• ProxyCannon - https://github.com/proxycannon/proxycannon-ng

Password-Spray

• MSOLSpray - https://github.com/dafthack/MSOLSpray
• o365enum.py - https://github.com/gremwell/o365enum
• goPassGen - https://github.com/bigb0sss/goPassGen (*PasswordSpray List Generator)

Post-Exploitation

AD Recon/Survey

• Seatbelt - https://github.com/GhostPack/Seatbelt (*Ghostpack)
• DNS Enum - https://github.com/dirkjanm/adidnsdump

Lateral Movement

• SpectorOps - https://posts.specterops.io/offensive-lateral-movement-1744ae62b14f

Offensive C#

• C# Collection - https://github.com/midnightslacker/Sharp/blob/master/README.md

LiveOffTheLand

• LOLBAS - https://lolbas-project.github.io/#

AV/AMSI Evasions

• xencrypt - https://github.com/the-xentropy/xencrypt (*PowerShell)
• FalconStrike - https://github.com/slaeryan/FALCONSTRIKE
• AV_Bypass - https://github.com/Techryptic/AV_Bypass

Exploit Dev

Windows

• https://github.com/Ondrik8/exploit

Nix

RedTeam Researchers/Githubs

• Vincent Yiu - https://vincentyiu.com
• Outflank - https://github.com/outflanknl
• Bank Security - https://github.com/BankSecurity/Red_Team
• Infosecn1nja - https://github.com/infosecn1nja (Redteam-Toolkit = AWESOME)
• Yeyintminthuhtut - https://github.com/yeyintminthuhtut
• RedCanary (Atomic RedTeam) - https://github.com/redcanaryco/atomic-red-team

Lab Resources

• Windows Server VMs - https://www.microsoft.com/en-us/evalcenter
• Windows 10 - https://www.microsoft.com/en-us/software-download/windows10ISO
• Archive of WinVMs - https://archive.org/search.php?query=subject%3A%22IEVM%22

Sexy Resources

• MITRE ATT&CK - https://attack.mitre.org/
• MalwareNews - https://malware.news/

BlueTeam

Lab Resources

• Detection Lab - https://github.com/clong/DetectionLab