api0cradle

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

CVE-2023-23397-POC-Powershell

PowerAL

A Powershell module that helps you identify AppLocker weaknesses

RedTeamScripts

Just some random Red Team Scripts that can be useful

PowershellScripts

A collection of useful Powershell Scripts that I have created

Powershell-ICMP

BGInfo

AppLocker-Stuff

Just some random stuff for AppLocker

trevorc2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

impacket

Impacket is a collection of Python classes for working with network protocols.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

dnsrecon

DNS Enumeration Script

Windows-SignedBinary

regln

Windows Rregistry Linking Utility

sysinternals-source

zeroday-powershell

A PowerShell example of the Windows zero day priv esc

api0cradle.github.io

DerbyCon2019

Code & Slides For DerbyCon 2019

RegistrationFreeCOM

Inject DLL Prototype using Microsoft.Windows.ACTCTX COM Object

WindowsScriptHostExtension

Extend WSH functionality with Registration-Free COM

ADExplorerSnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Go365

An Office365 User Attack Tool

MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

MSOLSpray-py

A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

o365spray

Username enumeration and password spraying tool aimed at Microsoft O365.

spraycharles

Low and slow password spraying tool, designed to spray on an interval over a long period of time

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!