enigma0x3

Generate-Macro

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

Misc-PowerShell-Stuff

random powershell goodness

Invoke-LoginPrompt

Invokes a Windows Security Login Prompt and outputs the clear text password.

Invoke-AltDSBackdoor

Powershell-Payload-Excel-Delivery

Uses Invoke-Shellcode to execute a payload and persist on the system.

MessageBox

PoC dlls for Task Scheduler COM Hijacking

OutlookPersistence

Powershell-C2

Old-Powershell-payload-Excel-Delivery

This version touches disk for registry persistence.

windows-operating-system-archaeology

windows-operating-system-archaeology @Enigma0x3 @subTee

PenTesting-Scripts

A ton of helpful tools

PowershellProfile

Abuses Powershell Profiles

atomic-red-team

Small and highly portable detection tests.

PowerShell-Suite

My musings with PowerShell

Empire

Empire is a pure PowerShell post-exploitation agent.

bugs

DeviceGuardBypassMitigationRules

A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses

misc-1

sandbox-attacksurface-analysis-tools

Set of tools to analyze and attack Windows sandboxes.

BCD

BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.

Misc

oleviewdotnet

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

windows-itpro-docs

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

blogstuff

delphi-code-coverage

This is a clone of the code coverage tool for Delphi on http://code.google.com/p/delphi-code-coverage/

DotNetInteropDemos

A set of demos and a PowerShell module to interact with DotNetInterop.

impacket

Impacket is a collection of Python classes for working with network protocols.

OPCDE

OPCDE DXB 2017 Materials