lazyf0x00

RTLab

CodeExecutionOnWindows

A list of ways to execute code on Windows using legitimate Windows tools

koadic

Koadic C3 COM Command & Control - JScript RAT

PatrowlHears

PatrowlHears - Vulnerability Intelligence Center / Exploits

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

RedTeam

RedTeam

rtfm

Cheat sheet and notes inspired by the book RTFM - Red Team Field Manual

vapt-checklist

web application testing checklist

AD-Attack-Defense

Active Directory Security For Red & Blue Team

ADACLScanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

ConPtyShell

ConPtyShell - Fully Interactive Reverse Shell for Windows

demo

测试文件

HTTP-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

MalleableC2-Profiles

A collection of Cobalt Strike Malleable C2 profiles

MatchandReplace

Match and Replace script used to automatically generate JSON option file to BurpSuite

OSCP

OSCP

Penetration-Testing-Tools

Great collection of my Penetration Testing scripts, tools, cheatsheets collected over years, used during real-world assignments or collected from various good quality sources.

pentest-1

:no_entry: offsec batteries included

Pentest-Tools

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

Red-Teaming-Toolkit

A collection of open source and commercial tools that aid in red team operations.

redteam-1

Red Team Scripts by d0nkeys (ex SnadoTeam)

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

SharpSMBSpray

Spray a hash via smb to check for local administrator access

SharPyShell

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

WinPwnage

💻 Elevate, UAC bypass, privilege escalation, dll hijack techniques

xss

zeroday-powershell

A PowerShell example of the Windows zero day priv esc