Automated Adversary Emulation Platform

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

The Network Execution Tool

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

The SpecterOps project management and reporting engine

C2/post-exploitation framework

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event s…

Python 3.5+ DNS asynchronous brute force utility

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

Kraken, a modular multi-language webshell coded by @secu_x11

A Golang implant that uses Slack as a command and control server

Security Auditor Utility for GraphQL APIs

Slack enumeration and exposed secrets detection tool

DART is a test documentation tool created by the Lockheed Martin Red Team to document and report on penetration tests, especially in isolated network environments.

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

Translator from USB-Rubber-Ducky payloads to a Digispark code.

Finding exposed secrets and personal data in GitLab

Dorothy is a tool to test security monitoring and detection for Okta environments

🦁 Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files