S3cur3Th1sSh1t

No description.

Encrypted shellcode Injection to avoid Kernel triggered memory scans

No description.

Automation for internal Windows Penetrationtest / AD-Security

A User Impersonation tool - via Token or Shellcode injection

Pass the Hash to a named pipe for token Impersonation

No description.

This repo contains some Amsi Bypass methods i found on different Blog Posts.

No description.

This repo covers some code execution and AV Evasion methods for Macros in Office documents

Some usefull Scripts and Executables for Pentest & Forensics

No description.

No description.

A Nim implementation of reflective PE-Loading from memory

Get fresh Syscalls from a fresh ntdll.dll copy

Decrypt Veeam database passwords

Pass the Hash to a named pipe for token Impersonation

AmsiScanBufferBypass using D/Invoke

Phish password protected Excel-Files

D/Invoke implementation in Nim

This repo contains useful scripts that AI created for me which I would have been too lazy for

C# binary with embeded golang hack-browser-data

No description.

RDPThief donut shellcode inject into mstsc

ShellcodeFluctuation PoC ported to Nim

This is my starred repositories including the description for each tool. Makes search/filter over them easier.

CallBack-Techniques for Shellcode execution ported to Nim

Load C# Code straight to memory

IOXIDResolver from AirBus Security/PingCastle

Wordlist attacks on Bitwarden data.json files

A little scanner to check the LDAP Signing state

Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069

No description.

AppXSVC Service race condition - privilege escalation

C# Based Universal API Unhooker - Automatically Unhook API Hives (ntdll.dll,kernel32.dll,user32.dll,and kernelbase.dll)

Reversed cassandra source code for educational purposes

string encryption in Nim

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

A PowerShell script anti-virus evasion tool

C# wrapper for ligolo

No description.

My experiments in weaponizing Nim (https://nim-lang.org/)

A PowerShell script for helping to find vulnerable settings in AD Group Policy.

A collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.

A collection of awesome penetration testing resources, tools and other shiny things

Decrypt Matrix42 Empirum /EIS Passwords

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

The Hunt for Malicious Strings

Straight forward script for WMI information gathering (local or remote)

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

No description.

A PowerShell Armoury for Penetration Testers or other random security guys

No description.

Dark Web OSINT Tool

Privilege Escalation Enumeration Script for Windows

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

No description.

Powershell script to execute different forensic Powershell functions / tools on a compromised host

No description.

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

A post-exploitation powershell tool for extracting juicy info from memory.

Respositoy of all my notes on infosec I have been building up over the years

Active Directory Security For Red & Blue Team

Proof of Concepts code for Bring Your Own Vulnerable Driver techniques

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

Python script to decrypt passwords stored by mRemoteNG

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

PowerShell Runspace Post Exploitation Toolkit

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

Metasploit Framework

The Shadow Attack Framework

📡 A python program to create a fake AP and sniff data.

A curated list of awesome Security Hardening techniques for Windows.

PSAmsi is a tool for auditing and defeating AMSI signatures.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Get a list of installed software in a safe manner

Penetration Testing/Security Cheatsheets

Just a copy from here: https://gitlab.com/0x4ndr3/blog/blob/master/JSgen/JSgen.py

Adaptive DLL hijacking / dynamic export forwarding

Simple c# source code obfuscator

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

Check if MS-RPRN is remotely available with powershell/c#

Framework for Kerberos relaying

This is a bind shell PoC using PrintDemon.

A collection of awesome readme templates to display on your profile

Resolve WinAPI func. Custom GetProcAddress and GetModuleHandle written in Nim

Automated compiler obfuscation for nim

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Tool for interacting with outlook interop during red team engagements

Nim Library for Offensive Security Development

Windows - Weaponizing privileged file writes with the Update Session Orchestrator service

Impacket is a collection of Python classes for working with network protocols.

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Payload Generation Framework

The most complete Phishing Tool, with 32 templates +1 customizable

WMI virus, because funny

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients, and a "mimic" feature that automatically generates custom payloads.

.Net Assembly to block ETW telemetry in current process

A set of programs for analyzing common vulnerabilities in COM

MSBuildShell, a Powershell Host running within MSBuild.exe

Hosts File for Blocking Advertising & Tracking Domains

SMB Relay Attack Script

Windows 权限提升 BadPotato

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Framework for Man-In-The-Middle attacks

Empire 3.0 is a PowerShell and Python 3.x post-exploitation framework.

A pentest scanning task automation project using custom resource files and Metasploit's internal services database.

Markdown Cheatsheet for Github Readme.md

Scripts to gather system configuration information for offline/remote auditing

Great collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.

No description.

GUI-based UAC bypass

No description.

MS17-010

PowerSploit - A PowerShell Post-Exploitation Framework

Inveigh is a Windows PowerShell LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

Collection of tested Cobaltstrike aggressor scripts.

SharpUp is a C# port of various PowerUp functionality.

A mix of Snake and "Achtung die Kurve" with multiplayer mode

Demoting PPL anti-malware services to less than a guest user

No description.

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

Automate Pentest Tool

HT-WPS Breaker (High Touch WPS Breaker)

No description.

Out-of-the-box CobaltStrike Beacon source code use C++

files for write-up

A python RCE exploit on QNAP-QTS

BMC Bladelogic RSCD exploits including remote code execution - CVE-2016-1542, CVE-2016-1543, CVE-2016-5063

Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments

No description.

A rust library that allows you to host the CLR and execute dotnet binaries.