johnlatwc Goto Github PK

bella

Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻

bluehat2018graphworkshop

Bluehat 2018 Graphs for Security Workshop

cccs-yara

YARA rule metadata specification and validation utility

crowdfms

CrowdStrike Feed Management System

cs-remote-ops-bof

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

customkeyboardlayoutpersistence

Achieve execution using a custom keyboard layout

darkloadlibrary

LoadLibrary for offensive operations

didierstevenssuite

Please no pull requests for this repository. Thanks!

dll-hijack-search-order-bof

DLL Hijack Search Order Enumeration BOF

docplz

Documents Exfiltration project for fun and educational purposes

drvmon

Advanced driver monitoring utility.

edrsandblast

evilosx

A pure python, post-exploitation, RAT (Remote Administration Tool) for macOS / OSX.

firewall_walker_bof

A BOF to interact with COM objects associated with the Windows software firewall.

gcat

A PoC backdoor that uses Gmail as a C&C server

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

macrojob

Proof of concept VBA code to add to Normal.dot to put restrictions on Word

mandiant-azure-ad-investigator

metasploit-framework

Metasploit Framework

msrc

Scripts for interacting with MSRC portal data

msticpy

Microsoft Threat Intelligence Security Tools

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

permhash

ppldump

Dump the memory of a PPL with a userland exploit

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

pypowershellxray

Python script to decode common encoded PowerShell scripts

raccine

A Simple Ransomware Vaccine

rat-via-telegram

Windows Remote Administration Tool via Telegram