hesrami

nanodump

The swiss army knife of LSASS dumping

OST-C2-Spec

Open Source C&C Specification

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

New-KrbtgtKeys.ps1

This script will enable you to reset the krbtgt account password and related keys while minimizing the likelihood of Kerberos authentication issues being caused by the operation.

volatility2-profiles

Collection of Volatility2 profiles, generated against Linux kernels.

Privilege-Escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

JenkinsPasswordSpray

A tool to password spray Jenkins instances

pwn_jenkins

Notes about attacking Jenkins servers

precompiled-binaries

Collection of useful pre-compiled .NET binaries or other executables for penetration testing Windows Active Directory environments

impacket_static_binaries

Standalone binaries for Linux/Windows of Impacket's examples

ObfuscatedSharpCollection

Attempt at Obfuscated version of SharpCollection

NetNTLMtoSilverTicket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

hugo-theme-terminalcv

An easy to setup and (almost) fully customizable command line style CV theme for HUGO

ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

MultiDump

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

Privilege-Escalation-Windows

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

token-priv

Token Privilege Research

ADCSKiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

ldapdomaindump

Active Directory information dumper via LDAP

i3blocks-contrib

Official repository for community contributed blocklets

kali-clean

my kali desktop setup

RogueSliver

A suite of tools to disrupt campaigns using the Sliver C2 framework.

GOAD

game of active directory

PrintSpoofer

Abusing impersonation privileges through the "Printer Bug"

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

CTF

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

OSCP-Enum-Handbook

This is my personal Enumeration Handbook that I used for the OSCP 2023

bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework