Maximus's repositories
LocalKdc
Info on how to use Kerberos KDC on a non-domain joined host
gcpwn
Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot
emptyrepo
just an empty repo
LetMeowIn
A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.
LDAPmonitor
Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!
No-Consolation
A BOF that runs unmanaged PEs inline
CrimsonEDR
Simulate the behavior of AV/EDR for malware development training.
SOAPHound
SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.
Subdominator
The Internets #1 Subdomain Takeover Tool
BobTheSmuggler
"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).
EDRSilencer
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
BestEdrOfTheMarket
Little AV/EDR bypassing lab for training & learning purposes
ShellGhost
A memory-based evasion technique which makes shellcode invisible from process start to end.
wmiexec-Pro
New generation of wmiexec.py
siphon
:alembic: Intercept stdin/stdout/stderr for any process
SharpEfsPotato
Local privilege escalation from SeImpersonatePrivilege using EfsRpc.
Snaffler
a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )
IOXIDResolver
IOXIDResolver.py from AirBus Security
pan-python
Multi-tool set for Palo Alto Networks PAN-OS, Panorama, WildFire and AutoFocus
TypeScript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
SysWhispers
AV/EDR evasion via direct system calls.
HijackLibs
Project for tracking publicly disclosed DLL Hijacking opportunities.
npk
A mostly-serverless distributed hash cracking platform
windows-coerced-authentication-methods
A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.
traitor
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock