threatexpress

Cobalt Strike Malleable C2 Design and Reference Guide

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

A collection of Red Team focused tools, scripts, and notes

Cobalt Strike random C2 Profile generator

Convert Cobalt Strike profiles to modrewrite scripts

The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.

Cobalt Strike Aggressor Scripts

A collection of random bits of information common to many individual penetration tests, red teams, and other assessments

ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as...

SubShell is a python command shell used to control and execute commands through HTTP requests to a webshell. SubShell acts as the interface to the remote webshells.

SMB Named Pipe shell

PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and services from multiple systems managed by a central console.