Lists (26)
ACTIVEDIRECTORY
ANDROID
AWS
AZURE
BLOODHOUND
BOF
C2
CODE REVIEW
CONF
CRYPTO
EDR
FIREWALL
GCP
IOS
LINUX
MAINFRAME ZOS
MALDEV
OSINT
OTHER
PENTEST
PHISHING
RAPPORT
REDTEAM
RUST
WEB
WINDOWS
Stars
Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI
OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website.
A security assessment tool for analyzing Active Directory Group Policy Objects (GPOs) to identify misconfigurations and vulnerabilities
Check for LDAP protections regarding the relay of NTLM authentication
.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
Kerberoast with ACL abuse capabilities
Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.
Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.
An even funnier way to disable windows defender. (through WSC api)
"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS
A powerful, modular, lightweight and efficient command & control framework written in Nim.
🔍 Search anyone's digital footprint across 300+ websites
A tool to remotely detect unusual sessions opened on windows machines using RPC
🧙♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
Tool to bypass LSA Protection (aka Protected Process Light)
Some Rust program I wrote while learning Malware Development
Some POCs for my BYOVD research and find some vulnerable drivers
a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )
A cargo subcommand to build Windows installers for rust projects using the WiX Toolset