Red Team Security Tools

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

This is Advance Phishing Tool ! OTP PHISHING

LDAP library for auditing MS AD

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)

Small and highly portable detection tests based on MITRE's ATT&CK.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

A post exploitation framework designed to operate covertly on heavily monitored environments

Easy to use, open-source infrastructure management platform, crafted specifically for red team engagements.

smbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares

The Havoc Framework

Adversary Emulation Framework

Generic PE loader for fast prototyping evasion techniques

Nimbo-C2 is yet another (simple and lightweight) C2 framework

Sandman is a NTP based backdoor for red team engagements in hardened networks.

A tool to monitor for potential spear phishing domains and send to Slack.

ShellBringer is a Python script designed for penetration testers. It facilitates the creation and management of reverse shell payloads, automating listener setup across multiple platforms.

Execute commands interactively on remote Windows machines using the WinRM protocol

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

Linux enumeration tool for pentesting and CTFs with verbosity levels

An MCP server implementation