cpo-eh Goto Github PK

log4shell-detector

Detector for Log4Shell exploitation attempts

lsasssilentprocessexit

Command line interface to dump LSASS memory to disk via SilentProcessExit

maas

Malware As A Service

masqueradingpeb

Maquerade any legitimate Windows binary by changing some fields in the PEB structure

medusa

LD_PRELOAD Rootkit

metasploit-cheat-sheet

Metasploit Cheat Sheet 💣

microsoft-cybersecurity-pro-track-threat-detection

Microsoft Cybersecurity Pro Track: Threat Detection, by EC-Council

microsoft-teams-gifshell

microsoftwontfixlist

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

msdt-follina

Codebase to generate an msdt-follina payload

ntpescape

NTP Exfiltration Tool

obligato

This project is an implant framework designed for long term persistent access to Windows machines.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

perses

X86 Mutation Engine with Portable Executable compatibility.

persistbof

postdump

powertools

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

reverse-shell-cheatsheet

🙃 Reverse Shell Cheat Sheet 🙃

rules

Repository of yara rules

s4utomato

Escalate Service Account To LocalSystem via Kerberos

sandman

Sandman is a NTP based backdoor for red team engagements in hardened networks.

seth

Perform a MitM attack and extract clear text credentials from RDP connections

sharpblackout

Terminate AV/EDR leveraging BYOVD attack

sharpzerologon

Zerologon Exploiter I used on Cobalt Strike

shellcode-ghost

sliver

Adversary Emulation Framework

soaphound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.