This is a collection of gamified exercises I have used at various cybersecurity workshops, events and conferences to help make learning more fun and engaging.

BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catalog of beacons and a clear schema to add more beacons over ti…

CISOinaBox is a free community framework to organize tools, templates, and resources to help equip new CISOs and set them up for success.

CTRL-ESC-HOST is an assessment methodology for testing for security flaws in Kiosks and Presented Applications.

This project is to idenfity scenarios where File Smuggling Attacks could allow for beacon payloads, RMM-installers, or LotL binaries to traverse trust boundaries, such as for bypassing Kiosk restri…

Slides and resources for the Threat Intelligence Support Unit (TISU)

This is a joke repo, where we will refactor some of our red team tools to with the one and only payload of a Rick Roll video, for the betterment of society. And, there may also be the occasional Ha…

AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, along with post exploitation strategies for blue and red teams w…

AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. It is our hope that this tool will be useful to red teams ov…

BypassIT is a framework for covert malware delivery and post-exploitation using AutoIT for red / blue team self assessment.

This project is a collection of thoughts and resources, as a few of us begin to explore ways to implement deception technologies without having to buy expensive third-party solutions.

This repo is to organize slides and resources around introducing beginners to the topic of analyzing malware.

This project is to create a tool for stealthy recon of adjacent network devices and possible attack paths, in the post-exploitation context.

This project is intended to organize useful scripts for testing WWB-COM basic scripts for purple teaming and self assessment.

This repository is a placeholder for future research on using blue team detection frameworks, from an adversarial perspective, to find vulnerable assets in an environment. Lots of ideas, but not ti…

This is a project to test the effectiveness and evasiveness of using AutoIT to access the windows credential store, building upon prior work done in the Mimikatz project.

This project is to assemble resources, research, templates, and eventually working software for organizations to fast-track GRC efforts, without the hefty price tag.