Mr-Un1k0d3r

EDRs

PowerLessShell

Run PowerShell command without invoking powershell.exe

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

RedTeamPowershellScripts

Various PowerShell scripts that may be useful during red team exercise

ThunderShell

Python / C# Unmanaged PowerShell based RAT

RedTeamCSharpScripts

C# Script used for Red Team

RedTeamCCode

Red Team C code repo

.NetConfigLoader

.net config loader

MaliciousClickOnceGenerator

Quick Malicious ClickOnceGenerator for Red Team

ADHuntTool

official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

AMSI-ETW-Patch

Patch AMSI and ETW

ATP-PowerShell-Scripts

Microsoft Signed PowerShell scripts

Shellcoding

Shellcoding utilities

WindowsDllsExport

A list of all the DLLs export in C:\windows\system32\

DLLsForHackers

Dll that can be used for side loading and other attack vector.

Cookie-and-Handle-Stealer

C or BOF file to extract WebKit master key to decrypt user cookie

Elevate-System-Trusted-BOF

RedTeamScripts

Repo with various Red Team scripts

SPFAbuse

SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

SearchIPOwner

Search public IP owner through ARIN

SideChannelAttack

Side Channel script

MsGraphFunzy

Scripts to interact with Microsoft Graph APIs

pentest-tools

Custom pentesting tools

BOFCode

Bunch of BOF files

blog.mr.un1k0d3r.com

Mr.Un1k0d3r.com blog

CVE-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

openedr

Open EDR public repository

PPLDump_BOF

A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.

CVE-2020-1472

Test tool for CVE-2020-1472

impacket

Impacket is a collection of Python classes for working with network protocols.