attackdeveloper

LaZagne

Credentials recovery project

pwn_jenkins

Notes about attacking Jenkins servers

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

VBA-RunPE

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

SharpGPOAbuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

tokenx_privEsc

with metasploit

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

ElevateKit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

AggressorCollection

Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors

Aggressor-VYSEC

AggressorScripts

Various Aggressor Scripts I've Created.

SharpCradle

Amsi-Bypass-Powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

Modlishka

Modlishka. Reverse Proxy.

wnfun

WNF Utilities 4 Newbies (WNFUN)

CasperStager

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.

ruler

A tool to abuse Exchange services

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

flatpipes

A TCP proxy over named pipes. Originally created for maintaining a meterpreter session over 445 for less network alarms.

CallObfuscator

Obfuscate specific windows apis with different apis

SharpSploit

SharpSploit is a .NET post-exploitation library written in C#

SharpWeb

.NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.

RedTeamCSharpScripts

C# Script used for Red Team

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters