This github repository contains a collection of 150+ tools and resources that can be useful for red teaming activities.
Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context.
🔗 If you are a Blue Teamer, check out BlueTeam-Tools
Warning
The materials in this repository are for informational and educational purposes only. They are not intended for use in any illegal activities.
Note
Hide Tool List headings with the arrow.
Click 🔙 to get back to the list.
Red Team Tips 19 tips
- Improved HTML smuggling with mouse move eventlistener @pr0xylife
- Google translate for phishing @malmoeb
- Hiding the local admin account @Alh4zr3d
- Cripple windows defender by deleting signatures @Alh4zr3d
- Enable multiple RDP sessions per user @Alh4zr3d
- Sysinternals PsExec.exe local alternative @GuhnooPlusLinux
- Live off the land port scanner @Alh4zr3d
- Proxy aware PowerShell DownloadString @Alh4zr3d
- Looking for internal endpoints in browser bookmarks @Alh4zr3d
- Query DNS records for enumeration @Alh4zr3d
- Unquoted service paths without PowerUp @Alh4zr3d
- Bypass a disabled command prompt with /k Martin Sohn Christensen
- Stop windows defender deleting mimikatz.exe @GuhnooPlusLinux
- Check if you are in a virtual machine @dmcxblue
- Enumerate AppLocker rules @Alh4zr3d
- CMD shortcut with 6 pixels via mspaint PenTestPartners
- Link spoofing with PreventDefault JavaScript method
- Check SMB firewall rules with Responder @malmoeb
- Disable AV with SysInternals PsSuspend @0gtweet
Reconnaissance 24 tools
- spiderfoot Automated OSINT and attack surface mapping
- reconftw Automated subdomain and vulnerability recon tool