monoxgas

sRDI

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

Koppeling

Adaptive DLL hijacking / dynamic export forwarding

FlyingAFalseFlag

Slides and Code for the BHUSA 2019 talk: Flying a False Flag

minibus

Remote code execution in Power Platform connectors via JSON deserialization

DomainFrontingLists

A list of Domain Frontable Domains by CDN

Empire

Empire is a pure PowerShell post-exploitation agent.

mailorder

Nalpeiron Licensing Service (NLSSRV32) arbitrary disk read [CVE-2019-19315]

DotNetToJScript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

ruler

A tool to abuse Exchange services

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

changed-files

:octocat: Github action to retrieve all (changed, added, modified, deleted) files.

CTFd-secure-flags

CTFd secure flags plugin

fastapi

FastAPI framework, high performance, easy to learn, fast to code, ready for production

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

shellcc

Building optimized shellcode using GCC. Suited for learning assembly and playing with the ABI

windows-itpro-docs

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

counterfit

a CLI that provides a generic automation layer for assessing the security of ML models

demo

KrbRelay

Framework for Kerberos relaying

NetScalerEPABypass

A quick and dirty way to bypass encrypted EPA to connect to a NetScaler Gateway

openchange

OpenChange Project

powershell

Powerful PS scripts

Rubeus

Trying to tame the three-headed dog.

saml2aws

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

soft-carrot

swagger-ui-es

A fork of Swagger-UI which produces a valid ES bundle, rather than the bad CommonJS bundle of the original. This repo will go away once the main Swagger-UI has been fixed.

symcc

SymCC: efficient compiler-based symbolic execution