justnamehere Goto Github PK

adfsdump

adfspoof

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

csharp-runpe

Hide malware behind a legit process C#

kaonashi

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

oleviewdotnet

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pplkiller

Tool to bypass LSA Protection (aka Protected Process Light)

process-hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

process-hollowing-1

An implementation of the Process Hollowing technique.

process-hollowing-2

Process Hollowing in C++ (x86 / x64) - Process PE image replacement

processinjector.net

Learning Process Injection and Hollowing techniques

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

rules

Repository of yara rules

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sharpersist

sharpgpoabuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

shimit

A tool that implements the Golden SAML attack

silenthound

Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.

skf-flask

Security Knowledge Framework (SKF) Python Flask / Angular project

static-binaries

Various *nix tools built as statically-linked binaries

ticket_converter

A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.

whiskeysamlandfriends

GoldenSAML Attack Libraries and Framework