xpn

RandomTSScripts

Collection of random RedTeam scripts.

ssh-inject

A ptrace POC by hooking SSH to reveal provided passwords

OktaPostExToolkit

NautilusProject

A collection of weird ways to execute unmanaged code in .NET

sccmwtf

ntlmquic

POC tools for exploring SMB over QUIC protocol

WAMBam

Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post

RpcEnum

An command-line RPC method enumerator, born out of RPCView's awesomeness

CloudInject

Powershell-PostExploitation

Scripts created to help with post exploitation of a Windows host

DemoLab

A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI

DyldDeNeuralyzer

BlockchainC2

A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2

DotNetDebug

A simple POC to demonstrate the power of .NET debugging for injection

AppProxyC2

ObjectOverloadingPOC

stego-playground

warbird_exploit

https://blog.xpnsec.com/windows-warbird-privesc/

RpcExample

Example RPC service for blog post

jupyter

Collection of Jupyter notebooks

malIDP

MoarExploits

A collection of developed exploits

OneLoginPostExToolkit

winsudo

Small training tool to demo access token impersonation

PingPostExToolkit

Presentations

A collections of presentations

xpn

docker-hostapd-wpe

impacket-fork

Impacket is a collection of Python classes for working with network protocols.

Static

Static content for blog, readme etc..