cbhue Goto Github PK

admodule

Microsoft signed ActiveDirectory PowerShell module

bipipdecoder

bloodhound.py

A Python based ingestor for BloodHound

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

cve-2019-18935

RCE exploit for a .NET deserialization vulnerability in Telerik UI for ASP.NET AJAX.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

flare-floss

FireEye Labs Obfuscated String Solver - Automatically extract obfuscated strings from malware.

get-iplist

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

hashcatherder

This is a set it an forget it hashcat wrapper written in python3. it loops over a set of wordlists untill it cracks all the passwords or cycles thru all the wordlists.

hashid

Software to identify the different types of hashes -

iplister

Reads [nMap.xml, Nessus.nessus] saves all open ports by IP address

jdwp-shellifier

memdumper

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

mhydeath

Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.

nmap_merger

Merge multiple nMap xml files into one

officepurge

pafishmacro

Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.

parseportscan

poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

preplist

privesccheck

Privilege Escalation Enumeration Script for Windows

ps-hashcatherder

Automates running hashcat over multiple wordlists.

pubcrawl

Use Shodan & Censys to perform port lookup on a list of ip's

pyfuscation

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

recon-da

Performs initial recon of provided targets.