cmjlove's repositories
active-directory-firewall
Active Directory Firewall
adexplorersnapshot-rs
adexplorersnap use rust
apeman
AWS Attack Path Management Tool - Walking on the Moon
CVE-2024-4323-Exploit-POC
This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution.
DeadPotato
DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the original GodPotato source code by BeichenDream.
DonPAPI
Dumping DPAPI credz remotely
File-Tunnel
Tunnel TCP connections through a file
InsightEngineering
Hardcore Debugging
Invoke-Maldaptive
MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
knowsmore
KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).
LeakedWallpaper
Leak of any user's NetNTLM hash. Fixed in KB5040434
ludus_sccm
An Ansible collection that installs an SCCM deployment with optional configurations.
myADMonitor
myADMonitor is an open-source Active Directory changes tracking tool
NativeDump
Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)
no-defender
A slightly more fun way to disable windows defender. (through the WSC api)
offsec-tools
Compiled tools for internal assessments
OPSEC-Tradecraft
Collection of OPSEC Tradecraft and TTPs for Red Team Operations
POC-exp
收集整理漏洞EXp/POC,大部分漏洞来源网络，目前收集整理了400多个poc/exp，长期更新。
profiler-lateral-movement
Lateral Movement via the .NET Profiler
RemoteKrbRelay
Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
RustScan
🤖 The Modern Port Scanner 🤖
SCCMSecrets
SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
SessionExec
Execute commands in other Sessions
sigma
Main Sigma Rule Repository
smbclient-ng
smbclient-ng, a fast and user friendly way to interact with SMB shares.
smbtakeover
BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
TrickDump
Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!