Skip to content

@DefensiveOrigins Defensive Origins

Change the repository type filter

All

    Repositories list

    50 repositories

    • AC-PreReqs

      Public
      0•1•0•0•Updated Jan 30, 2025Jan 30, 2025

    • DO-LAB

      Public
      HTML
      •
      GNU General Public License v3.0
      •16•46•1•0•Updated Jan 30, 2025Jan 30, 2025

    • AC-Extras

      Public
      Assumed Compromise Additional Components
      0•0•0•0•Updated Jan 29, 2025Jan 29, 2025

    • BloodHound

      Public
      Six Degrees of Domain Admin
      PowerShell
      •
      GNU General Public License v3.0
      •1.8k•3•0•0•Updated Jan 29, 2025Jan 29, 2025

    • csp_check

      Public
      check if a CSP record exists
      Python
      •0•1•0•0•Updated Jan 22, 2025Jan 22, 2025

    • icmp-timestamp

      Public
      extract remote timestamp from hping3 icmp replies
      Shell
      •0•4•0•0•Updated Jan 21, 2025Jan 21, 2025

    • SharpCollection

      Public
      Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
      351•0•0•0•Updated Jan 11, 2025Jan 11, 2025

    • DTE_Extras

      Public
      PowerShell
      •0•0•0•0•Updated Oct 7, 2024Oct 7, 2024

    • NECSC24

      Public
      Nebraska Cyber Security Conference - Talk Slides & Content
      0•0•0•0•Updated Sep 17, 2024Sep 17, 2024

    • ADD-PreReqs

      Public
      Attack Detect Defend Course Pre-Requisites
      0•1•0•0•Updated Jun 20, 2024Jun 20, 2024

    • Detect-msDS-KeyCredentialLink

      Public
      Detect msDS-KeyCredentialLink Changes
      0•7•0•0•Updated Jun 19, 2024Jun 19, 2024

    • impacket

      Public
      Impacket is a collection of Python classes for working with network protocols.
      Python
      •
      Other
      •3.6k•0•0•0•Updated Jun 1, 2024Jun 1, 2024

    • SysmonCommunityGuide

      Public
      TrustedSec Sysinternals Sysmon Community Guide
      CSS
      •168•1•0•0•Updated May 26, 2024May 26, 2024

    • PetitPotam

      Public
      PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
      C
      •288•0•0•0•Updated May 26, 2024May 26, 2024

    • BloodHound.py

      Public
      A Python based ingestor for BloodHound
      Python
      •
      MIT License
      •334•0•0•0•Updated May 21, 2024May 21, 2024

    • PKINITtools

      Public
      Tools for Kerberos PKINIT and relaying to AD CS
      Python
      •
      MIT License
      •82•0•0•0•Updated Apr 12, 2024Apr 12, 2024

    • ADD_Extras

      Public
      ADD Extras
      0•0•0•0•Updated Apr 2, 2024Apr 2, 2024

    • PowerShellArmoury

      Public
      A PowerShell armoury for security guys and girls
      PowerShell
      •
      Apache License 2.0
      •69•0•0•0•Updated Jan 23, 2024Jan 23, 2024

    • APT22Things

      Public
      Location for a few things necessary for APT22
      BSD 2-Clause "Simplified" License
      •0•1•0•2•Updated Dec 19, 2023Dec 19, 2023

    • Training

      Public
      Defensive Origins Training Schedule
      trainingaptwebcasts
      5•37•0•0•Updated Dec 11, 2023Dec 11, 2023

    • HostRecon

      Public
      This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
      PowerShell
      •
      MIT License
      •119•1•0•0•Updated Dec 10, 2023Dec 10, 2023

    • MSSentinelSysmonParser

      Public
      A simple parser for Sysmon logs through EID28 for Microsoft Sentinel
      MIT License
      •0•3•0•0•Updated Dec 23, 2022Dec 23, 2022

    • APT-PreReqs

      Public
      Applied Purple Teaming Course Pre-Requisites
      4•13•0•0•Updated Sep 28, 2022Sep 28, 2022

    • SentinelKQL

      Public
      Some supporting KQL queries for a blog
      0•7•0•0•Updated Jun 22, 2022Jun 22, 2022

    • DTEsrc2022

      Public
      Additional resources for DTE 2022
      PowerShell
      •0•0•0•0•Updated Mar 14, 2022Mar 14, 2022

    • bl-bfg

      Public
      Python
      •
      MIT License
      •10•0•0•0•Updated Mar 3, 2022Mar 3, 2022

    • SILENTTRINITY

      Public
      An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
      Boo
      •
      GNU General Public License v3.0
      •409•2•0•0•Updated Feb 16, 2022Feb 16, 2022

    • BruteLoops

      Public
      Python
      •
      MIT License
      •3•1•0•0•Updated Feb 15, 2022Feb 15, 2022

    • DomainPasswordSpray

      Public
      DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
      PowerShell
      •
      MIT License
      •380•0•0•0•Updated Jan 8, 2022Jan 8, 2022

    • PowerTools

      Public
      PowerTools is a collection of PowerShell projects with a focus on offensive operations.
      PowerShell
      •
      Other
      •812•0•0•0•Updated Dec 28, 2021Dec 28, 2021