Jean-Francois-C

Ransomchats

sectemplates

Open source templates you can use to bootstrap your security programs

Group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

ROADtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

DriverJack

Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

nanodump

The swiss army knife of LSASS dumping

WhacAMole

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, shellcode, memory regions, modules and processes.

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

Dumpy

Reuse open handles to dynamically dump LSASS.

SharpDPAPI

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

DonPAPI

Dumping DPAPI credz remotely

NetExec

The Network Execution Tool

Trawler

PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.

SigmaPotato

SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection support.

Awesome-Cloud-PenTest

Amsi-Bypass-Powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

SharpImpersonation

A User Impersonation tool - via Token or Shellcode injection

AMSI.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

SharpUp

SharpUp is a C# port of various PowerUp functionality.

SharpWebServer

Red Team oriented C# Simple HTTP & WebDAV Server with Net-NTLM hashes capture functionality

Playbooks

Playbooks for SOC Analysts

Wazuh-Rules

Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!

ObfuscatedSharpCollection

Attempt at Obfuscated version of SharpCollection

EfsPotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

Packer_Development

Slides & Code snippets for a workshop held @ x33fcon 2024

OffensiveNotion

Notion as a platform for offensive operations

awesome-web-security

🐶 A curated list of Web Security materials and resources.

CloudPentestCheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

Fast-Google-Dorks-Scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.