Infrastructure (phishing, C2, redirector)

Red Team Infrastructure - Phishing, redirector, etc and automation

https://swisskyrepo.github.io/Drink-Love-Share-Rump/swisskyrepo.github.io

Living Off Trusted Sites

LOTS Project - Living Off Trusted Siteslots-project.com

Phishing

Social Engineering | Red Team Guidesbook.redteamguides.com

redteamrecipe.com is for sale! Check it out on ExpiredDomains.comExpiredDomains.com

Easy Phishing Infrastructure Setup for Red TeamingPayatu

Tools

Gophish - Open Source Phishing Frameworkgetgophish.com

Install gophish

Gone Phishing: Installing GoPhish and Creating a Campaign - Black Hills Information Security, Inc.Black Hills Information Security, Inc.

GitHub - htr-tech/zphisher: An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !GitHub

GitHub - trustedsec/social-engineer-toolkit: The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.GitHub

GitHub - fin3ss3g0d/evilgophish: evilginx3 + gophishGitHub

GitHub - rsmusllp/king-phisher: Phishing Campaign ToolkitGitHub

Ansible:

GitHub - VirtualSamuraii/flyphish: Deploy a phishing infrastructure on the fly.GitHub

Remove IoC from Gophish

GitHub - puzzlepeaches/sneaky_gophish: Hiding GoPhish from the boys in blueGitHub

Users emails

Social Media

Email reputation:

https://emailrep.io/emailrep.io

Valid emails

GitHub - 0xhav0c/valid-email-scanner: Valid Email Address ScannerGitHub

Template to use

GitHub - simplerhacking/Evilginx3-Phishlets: This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3. May be updated periodically.GitHub

GitHub - BiZken/PhishMailer: Generate Professional Phishing Emails Fast And EasyGitHub

https://x.com/nullenc0de/status/1848361811881435474

https://github.com/nullenc0de/servicelensgithub.com

Generate Typo Squatting

GitHub - urbanadventurer/urlcrazy: Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.GitHub

Check the availability and responsiveness of domains

GitHub - murat-exp/Domain-Checker-Tool: A high-performance Go-based tool for checking the availability and responsiveness of domains, utilizing both HTTP requests and browser automation for comprehensive analysis.GitHub

Recaptcha Phish

GitHub - JohnHammond/recaptcha-phish: Phishing with a fake reCAPTCHAGitHub

OAuth / QR code phishing

GitHub - secureworks/squarephishGitHub

Okta

GitHub - OtterHacker/OktaGinxGitHub

ShadowPhish - APT Awareness Toolkit

GitHub - CyberSecurityUP/ShadowPhish: ShadowPhish is an advanced APT awareness toolkit designed to simulate real-world phishing, malware delivery, deepfakes, smishing/vishing, and command & control attacks through an intuitive graphical interface. Perfect for cybersecurity training, red team education, and security awareness programs.GitHub

Offensive VBA

GitHub - S3cur3Th1sSh1t/OffensiveVBA: This repo covers some code execution and AV Evasion methods for Macros in Office documentsGitHub

C2

C2

The C2 Matrix | C2 Matrixhowto.thec2matrix.com

Redirector

Redirectors: A Red Teamer’s IntroductionOptiv

GitHub - D00Movenok/BounceBack: ↕️🤫 Stealth redirector for your red team operation securityGitHub

GitHub - OtterHacker/AWSRedirectorGitHub

Cloudflare Redirector

GitHub - som3canadian/Cloudflare-Redirector: Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.GitHub

Change IP every 5 minutes

GitHub - OtterHacker/AWSRoundRobinGitHub

Automated Infrastructure

GitHub - RedTeamOperations/Red-Infra-Craft: RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create advanced phishing & payload infrasGitHub

Resilient Infrastructure

GitHub - bluscreenofjeff/Red-Team-Infrastructure-Wiki: Wiki to collect Red Team infrastructure hardening resourcesGitHub

Automating Red Team Infrastructure with Terraform | Red Team Noteswww.ired.team

GitHub - 0xS2V2/marsform: terraform deployment for red teamGitHub

https://www.securesystems.de/blog/building-a-red-team-infrastructure-in-2023/www.securesystems.de

GitHub - SecuraBV/RedWizardGitHub

AWS

Interesting Books

Interesting Books

Disclaimer: As an Amazon Associate, I earn from qualifying purchases. This helps support this GitBook project at no extra cost to you.

• RTFM: Red Team Field Manual v2 A quick reference when there is no time to scour the Internet for that perfect command

• Red Team Development and Operations: A practical guide The authors have moved beyond SANS training and use this book to detail red team operations in a practical guide.

• Cybersecurity Attacks – Red Team Strategies A practical guide to building a penetration testing program having homefield advantage

Support this Gitbook

I hope it helps you as much as it has helped me. If you can support me in any way, I would deeply appreciate it.