natesubra

kernelcon_ctf_2024

misc_scripts

Miscellaneous scripts

natesubra.github.io

https://natesubra.github.io

test-pii-generator

Generate Sample PII Data using PowerShell

ThreatChecker

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

winapiexec

A small tool that allows to run WinAPI functions through command line parameters

autoinstall-example

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

FilelessRemotePE

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

GhostLoader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

hugo-book

Hugo documentation theme as simple as plain book

ipxe

iPXE network bootloader

kevinslin

mimikatz

A little tool to play with Windows security

natesubra

NetLoader

Loads any C# binary in mem, patching AMSI and bypassing Windows Defender

PINKPANTHER

Windows x64 handcrafted token stealing kernel-mode shellcode

PrintSpoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

PrivescCheck

Privilege Escalation Enumeration Script for Windows

rdp_alive

Small VB.net project that will generate an exe that keeps RDP sessions (mstsc.exe) unlocked/alive from the client side.

RedEye

RedEye is a visual analytic tool supporting Red & Blue Team operations

ScoopTools

My Personal Scoop.sh App Index/Search and tool repo

Serpico

SimplE RePort wrIting and COllaboration tool

SharpLocker

SharpRDPHijack

A POC Remote Desktop (RDP) session hijack utility for disconnected sessions

terry-the-terraformer

A CLI for deploying red team infrastructure across mutliple cloud providers, all integrated with a virtual Nebula network, and full ELK integration

TokenFinder

Tool to extract powerful tokens from Office desktop apps memory

ytmdesktop

A Desktop App for YouTube Music