LazyTitan33

styx

Styx is an cross-platform GUI interface for HackTheBox made in GoLang

Voidgate

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.

psgetsystem

getsystem via parent process using ps1 & embeded c#

awesome-esolangs

Curated list of awesome Esoteric languages and resources

Snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Ghostpack-CompiledBinaries

Compiled Binaries for Ghostpack (.NET v4.0)

Helpful-Scripts

A repo of scripts I find helpful for daily tasks.

bloodhound-convert

Python based Bloodhound data converter from the legacy pre 4.1 format to 4.1+ format

SigThief

Stealing Signatures and Making One Invalid Signature at a Time

CoercedPotato

A Windows potato to privesc

DLL-Hijacking

A repository including my research regarding DLL Hijacking

EC2StepShell

EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.

screenshot-to-code

Drop in a screenshot and convert it to clean code (HTML/Tailwind/React/Vue)

ScriptSentry

ScriptSentry finds misconfigured and dangerous logon scripts.

Autotyper_dev

msbuild-inline-task

RemotePotato0

Windows Privilege Escalation from User to Domain Admin.

LaZagne

Credentials recovery project

Security-Wordlist

A wordlist repository with human-curated and reviewed content.

CRTE-Notes

Study materials for the Certified Red Team Expert (CRTE) exam, covering essential concepts in red teaming and penetration testing.

Get-FileShareAccessRights

Multiple functions to evaluate critical file permissions on a specified network share

BadPfs-CVE-2022-4510

Python script that generates pfs payloads to exploit CVE-2022-4510

binnim

Shitty Nim code that reads in a file and converts it into \x hex representation, for the use of shellcode binaries.

Red-Teaming-TTPs

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

EvilRAT

Undetectable payload for Windows 10 and 11

FullPowers

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

HackBrowserData

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

SilentHound

Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.

RasmanPotato

Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do