topotam

Topotam's starred repositories

Havoc

The Havoc Framework.

Language:GoGPL-3.06308 96 319

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

MIT5208 112 10

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Language:PythonGPL-2.01656 22 57

marcel

Le docker français :whale: :fr:

Language:PythonMIT1593 21 39

EDRSandblast

Language:C1403 39 15

DFSCoerce

Language:Python700 10 4

certsync

Dump NTDS with golden certificates and UnPAC the hash

Language:PythonMIT604 3 12

Revenant

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

Language:C355 80

lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

Language:PythonMIT292 6 1

COFFLoader2

Load and execute COFF files and Cobalt Strike BOFs in-memory

Language:C185 40

PetitPotam

Python implementation for PetitPotam

Language:PythonMIT177 4 1

InlineWhispers2

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

Language:AssemblyGPL-3.0172 2 1

CheeseOunce

Coerce Windows machines auth via MS-EVEN

Language:C151 6 2

CMLoot

Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares

Language:PowerShellBSD-3-Clause143 1 1

SliverKeylogger

Language:C++MIT140 7 1

MSSQL-Analysis-Coerce

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

Language:Python121 30

ica2tcp

A SOCKS proxy for Citrix.

Language:C85 4 1

Elevator

UAC Bypass by abusing RPC and debug objects.

Language:C++MIT700

Backstab

A tool to kill antimalware protected processes

Language:C600

VSSTrigger

Language:Python6 20

C2-Tool-Collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

Language:C500

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

Language:PythonMIT200

CheeseOunce

Coerce Windows machines auth via MS-EVEN

Language:C200

CobaltBus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

200

EDRSandblast

Language:C200

palinka_c2

Just another useless C2 occupying space in some HDD somewhere.

Language:Python2 10

ZipExec

A unique technique to execute binaries from a password protected zip

Language:GoMIT2 10

DFSCoerce

100

lsarelayx

NTLM relaying for Windows made easy

100

Revenant

Revenant - A 3rd party agent for Havoc that aim to demonstrate evasion techniques in the context of a C2 framework

Language:C100