sevagas

mimikatz

A little tool to play with Windows security

trufflehog

Find and verify secrets

Probable-Wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

wesng

Windows Exploit Suggester - Next Generation

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

PowerShell-Suite

My musings with PowerShell

pe_to_shellcode

Converts PE into a shellcode

HTTPLeaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

ctftool

Interactive CTF Exploration Tool

DeathStar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

Watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Internal-Monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

NetRipper

NetRipper - Smart traffic sniffing for penetration testers

Bad-Pdf

Steal Net-NTLM Hash using Bad-PDF

Tokenvator

A tool to elevate privilege with Windows Tokens

riposte

Python package for wrapping applications inside a tailored interactive shell

ReelPhish

webxcel

🤔 A REST backend built with plain VBA Microsoft Excel macros. Yes. Macros.

tap

The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

spoofing-office-macro

:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

DCOMrade

Powershell script for enumerating vulnerable DCOM Applications

NetshHelperBeacon

Example DLL to load from Windows NetShell

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

MSRC

Scripts for interacting with MSRC portal data

ReflectiveDnsExfiltrator

Data exfiltration using reflective DNS resolution covert channel

Use-msxsl-to-bypass-AppLocker

Learn from Casey Smith@subTee

MagicLib

Non organized Cpp code files I used for my research on Windows

SysWhispers

AV/EDR evasion via direct system calls.

OneNote-resources