seahop Goto Github PK

kerberoast

Kerberoast attack -pure python-

knowndllunhook

Replace the .txt section of the current loaded modules from \KnownDlls\ to bypass edrs

koh

The Token Stealer

krbrelay

Framework for Kerberos relaying

kwprocessor

Advanced keyboard-walk generator with configureable basechars, keymap and routes

lapstoolkit

Tool to audit and attack LAPS environments

liquidsnake

LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

loadlibrary

A simple dll injector for windows based on WINAPI's LoadLibrary function.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

manualrsrcdatafetching

Get your data from the resource section manually, with no need for windows apis

memject

Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.

memorymodule

Library to load a DLL from memory.

memorypeinjector

A tool that reads a PE file from a byte array buffer and injects it into memory.

microsoft365_devicephish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

mimirust

All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)

minidump

Python library to parse and read Microsoft minidump file format

minikerberos

Kerberos manipulation library in pure Python

modules

Modules used by the Havoc Framework

mordor-rs

Rusty Hell's Gate / Halo's Gate / Tartarus' Gate / FreshyCalls / Syswhispers2 Library

msbuildapicaller

MSBuild Without MSBuild.exe

nanorobeus

COFF file (BOF) for managing Kerberos tickets.

newtab-dev

Repo following gecko-dev for newtab development. No longer maintained.

ntcreateuserprocess

Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html

ntdllpiperead

Opens 2 named pipes and uses cmd.exe to read in the contents of ntdll.dll between pipes. Tweaked the code from x86matthew's site https://www.x86matthew.com and fixed up a little to work in C.

oleviewdotnet

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

parallelsyscalls

patchetw

Function to patch ETW with syscalls

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

pe2hex

PE executable to array of bytes converter