Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

The all-in-one browser extension for offensive security professionals 🛠

The goal of this repository is to document the most common techniques to bypass AppLocker.

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

A collection of sources of documentation, as well as field best practices, to build/run a SOC

Bloodhound Reporting for Blue and Purple Teams

Hunting queries and detections

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

Purple Team Exercise Framework

Practical Windows Forensics Training

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

Slack enumeration and exposed secrets detection tool

Atomic Purple Team Framework and Lifecycle

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely u…

Diablo ~ Hacking / Pentesting & Reporting

Finding exposed secrets and personal data in GitLab

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.