red-team-tools

Tools and Techniques for Red Team / Penetration Testing

Adversary simulation and Red teaming platform with AI

The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.

Sandman is a NTP based backdoor for hardened networks.

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

Nimbo-C2 is yet another (simple and lightweight) C2 framework

Venom is a library that meant to perform evasive communication using stolen browser socket

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Generic PE loader for fast prototyping evasion techniques

Red Teaming python-framework for testing chatbots and GenAI systems.

A fast SSH mass-scanner, login cracker, banner grabber and password auth checker tool using the python-masscan and shodan module.

Self-hosted passive subdomain continous monitoring tool.

.NET CLR-Stomping

A curated list of awesome LLM Red Teaming training, resources, and tools.

Persistent Powershell backdoor tool {😈}

The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.

Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion

Curated cyber security resources for blue team, red team, DFIR, OSINT, AppSec, cloud security, security logging, and training.

Tor transport bridge for Sliver C2 - anonymous command and control

SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.