ilmanuz

GPOddity

The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).

PIMSCAN

Tool for creating reports on Entra ID Role Assignments

NativeDump

Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

x8

Hidden parameters discovery suite

SimuLand

Understand adversary tradecraft and improve detection strategies

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

go-secdump

Tool to remotely dump secrets from the Windows registry

HopLa

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

Amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

pysnaffler

pysnaffler

Snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

ForgeCert

"Golden" certificates

PwnDoc-Vulns

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

sourcemapper

Extract JavaScript source trees from Sourcemap files

Jomungand

Shellcode Loader with memory evasion

Volumiser

PsMapExec

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

oracle_forms

Testing tools for Oracle Forms

PPLBlade

Protected Process Dumper Tool

POSTDump

NTLM-Dementor

Get all NetNTLM Hashes via Different zero-click Methodologies from LLMNR Poisoning

PowerLessShell

Run PowerShell command without invoking powershell.exe

SocksOverRDP

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

Amsi-Bypass-Powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

DavRelayUp

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

KeePwn

A python tool to automate KeePass discovery and secret extraction.

PowerShell-Obfuscation-Bible

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.