Tools for endpoints

PowerShell AD post-exploitation.

Endgame's ATT&CK simulation framework.

Abuse Exchange services from the outside.

Asynchronous C2 powered by DLR runtimes.

Find and exploit sudo misconfigurations.

Analyze Windows sandboxes.

Offline Exploit-DB CLI.

Open SOC distribution.

Payload generation framework.

.NET post-exploitation library.

Remote SSH for the edge.

Open-source SOAR.

Vendor-agnostic detection rules.

Local-first threat hunting over logs you already have

Open-source adversary emulation framework.

Find juicy files on Windows shares.

Social-engineering attack framework.

CVE intelligence and exploit lookup CLI.

Build vulnerable instrumented labs.

Battle-tested Sysmon configuration.

Microsoft's Sysmon, on Linux.

All-in-one honeypot platform.

Send phishing via Microsoft Teams.

Zero-trust access for SSH, K8s and more.