baixueqiu123

PAExec

Remote execution, like PsExec

PetitPotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

RunasCs

RunasCs - Csharp and open version of windows builtin runas.exe

SharpToken

Windows Token Stealing Expert

Random

Assorted scripts and one off things

KeyTabExtract

Extracts Key Values from .keytab files

SharpRDP

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

ElevateKit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

Egress-Assess

Egress-Assess is a tool used to test egress data detection capabilities

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

GPRegistryPolicyParser

DAMP

The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification

Inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

SharpGPOAbuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

SharpChromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

Divert

WinDivert: Windows Packet Divert

PortBender

TCP Port Redirection Utility

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

AMSITrigger

The Hunt for Malicious Strings

AMSI.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

ConfuserEx

An open-source, free protector for .NET applications

hackerone-reports

Top disclosed reports from HackerOne

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

NoSQL-Attack-Suite

A couple of different scripts, made to automate attacks against NoSQL databases.

odat

ODAT: Oracle Database Attacking Tool

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

rfi-lfi-payload-list

🎯 RFI/LFI Payload List

sippts

kali package for sippts

ident-user-enum

ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system.

WerTrigger

Weaponizing for privileged file writes bugs with windows problem reporting