bmi000 Goto Github PK

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

pcc_3e

Online resources for Python Crash Course, 3rd edition, from No Starch Press.

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

presentations

Collections of past presentation slides

printnightmare-cve-2021-34527

PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits

process_overwriting

Yet another variant of Process Hollowing

protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

ransomlord

RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware pre-encryption.

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

sigma

Generic Signature Format for SIEM Systems

signature-base

Signature base for my scanner tools

simulate-network-traffic

Scripts for simulating various network attacks using shell/python

smbghost_rce_poc

tmhunting

Trend Micro XDR/Vision One Hunting Recipies

tmv1cloud

AWSGoat : A Damn Vulnerable AWS Infrastructure

uacme

Defeating Windows User Account Control

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

watchme

A high level file system watcher built in top of watchdog python module for watching file changes on a specific path and give alerts based on events..

windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

windows-vs-linux-loader-architecture

Side-by-side comparison of the Windows and Linux (GNU) Loaders

wordlist

yara-endpoint

Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.

yaramemoryscanner

Simple PowerShell script to enable process scanning with Yara.