Top 23 redteam-tool Open-Source Projects

• Scanners-Box

  0 7,955 6.4

  A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

• traitor

  1 6,488 0.0 Go

  :arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

  Project mention: Traitor – Automatic Linux privesc via exploitation of low-hanging fruits | news.ycombinator.com | 2023-06-12

• InfluxDB

  www.influxdata.com

  sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• Villain

  0 3,557 7.7 Python

  Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

• mortar

  0 1,338 5.7 Pascal

  evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR) (by 0xsp-SRD)

  

• moonwalk

  0 1,290 0.0 Rust

  Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. (by mufeedvh)

• kubesploit

  0 1,071 0.0 Go

  Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

  

• Pyramid

  0 609 5.6 Python

  a tool to help operate in EDRs' blind spots (by naksyn)

• WorkOS

  workos.com

  sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• PipeViewer

  0 527 7.3 C#

  A tool that shows detailed information about named pipes in Windows

  

• Offensive-OSINT-Tools

  0 496 7.1

  OffSec OSINT Pentest/RedTeam Tools

• ImpulsiveDLLHijack

  0 467 0.0 C#

  C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

• Dome

  0 453 5.8 Python

  Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. (by v4d1)

• KRBUACBypass

  1 441 5.2 C#

  UAC Bypass By Abusing Kerberos Tickets

  Project mention: KRBUACBypass: UAC Bypass By Abusing Kerberos Tickets | /r/purpleteamsec | 2023-07-30

• frostbyte

  0 365 0.0 C#

  FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

• RPCMon

  0 301 4.6 C#

  RPC Monitor tool based on Event Tracing for Windows

  

• PythonMemoryModule

  0 277 4.9 Python

  pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

• SharpGmailC2

  0 252 10.0 C#

  Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol

• red-tldr

  0 221 0.0 Go

  red-tldr is a lightweight text search tool, which is used to help red team staff quickly find the commands and key points they want to execute, so it is more suitable for use by red team personnel with certain experience.

• reveng_rtkit

  0 205 4.1 C

  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

• SharpStrike

  0 199 1.8 C#

  A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.

• ulexecve

  0 168 5.2 Python

  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.

  

• URL-obfuscator

  0 159 0.0 Python

  Python Program to obfuscate URLs to make Phishing attacks more difficult to detect. Uses Active open redirect list and other URL obfuscation techniques.

• Jasmin-Ransomware

  0 149 7.6 C#

  Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to overcome the risk of external attacks.

• cobaltstrike-headless

  0 143 10.0

  Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

• SaaSHub

  www.saashub.com

  sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

redteam-tools related posts

• An anonymous SMS sending tool with a WebGUI
  1 project | /r/coolgithubprojects | 5 Sep 2023
• An anonymous SMS sending tool with a WebGUI
  1 project | /r/opensource | 5 Sep 2023
• Using Python to Operate in EDR blind spots
  1 project | /r/netsec | 8 Apr 2023
• Using Python to operate in EDR blind spots
  1 project | /r/redteamsec | 8 Apr 2023
• Can I exec an new process without an executable file? (2015)
  3 projects | news.ycombinator.com | 2 Nov 2022
• frostbyte: FrostByte is a PoC project that combines different defense evasion techniques to build better redteam payloads - embed an encrypted shellcode stub into a known signed executable and still manage to keep it signed like how the Zloader malware did.
  1 project | /r/blueteamsec | 16 Apr 2022
• [OC] Data Exfiltration using RedDrop - A Python Webserver for file and data exfiltration which automatically detects, decodes, decrypts, and transforms data.
  2 projects | /r/redteamsec | 29 Mar 2022
• A note from our sponsor - WorkOS
  workos.com | 16 Apr 2024

  The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com