hansesecure Goto Github PK

abptts

TCP tunneling over HTTP/HTTPS for web application servers

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

admodule

Microsoft signed ActiveDirectory PowerShell module

applocker-audit

at-ps

Adversary Tactics - PowerShell Training

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome_windows_logical_bugs

collect for learning cases

bash-bunny

bloodhound

Six Degrees of Domain Admin

bloodhound-ce-api

Some tests with the bloodhound community api

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

browsergather

Fileless web browser information extraction

brute-sqlcipher

dev level ;-)

bruteshark

Network Analysis Tool

checkrobots

Checking the HTTP response Codes of robots.txt entries

convert-invoke-kerberoast

Converts the output from Invoke-Kerberoast into hashcat format.

credgrap_chrome

Still in dev mode

credgrap_ie_edge

Extract stored credentials from Internet Explorer and Edge

cve-2009-1437

cve-2019-0803

Win32k Elevation of Privilege Poc

cve-2019-0841

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

cve-2019-2107

CVE-2019-2107

cve-2020-0688

cve-2020-0688

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2021-1732-exploit

CVE-2021-1732 Exploit

cve-2021-40444

CVE-2021-40444 PoC

cve-2022-21882

win32k LPE

decryptautologon

Command line tool to extract/decrypt the password that was stored in the LSA by SysInternals AutoLogon