sec-fork Goto Github PK

practice-ad-cs-domain-escalation

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

predator

内网综合扫描工具

prepare-for-awd

AWD攻防赛脚本集合

pricking

Watering hole attack deployment tool based on reverse proxy.

primarytokentheft

Steal a primary token and spawn cmd.exe using the stolen token

printspoofer

PrintSpoofer的反射dll实现，结合Cobalt Strike使用

prismx

:: 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具。

privesc

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

privesccheck

Privilege Escalation Enumeration Script for Windows

privexchange

Exchange your privileges for Domain Admin privs by abusing Exchange

privexec

Run the program with the specified permission level (C++20 required)

privfu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

privileger

Privileger is a tool to work with Windows Privileges

privkit

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.

process-injection

汇总了目前可以找到的所有的进程注入的方式，完成了x86/x64下的测试，不断更新中

process_ghosting

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

processguard

A windows service to run all kinds of executeable from Session 0, can also be used to run console programs as windows services

processplayer

一些进程注入或者Shellcode注入的实例代码，用于练习和熟悉

protections-artifacts

Elastic Security detection content for Endpoint

protoscanner

protoscanner是一个使用纯Go编写的协议识别仓库，脱胎于NMAP

proxy-attackchain

proxylogon & proxyshell & proxyoracle & proxytoken & all exchange server vulns summarization :)

proxy-dll-loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

proxy_admin_free

Proxy是高性能全功能的http代理、https代理、socks5代理、内网穿透、内网穿透p2p、内网穿透代理、内网穿透反向代理、内网穿透服务器、Websocket代理、TCP代理、UDP代理、DNS代理、DNS加密代理，代理API认证，全能跨平台代理服务器。

proxyfor

A lightweight proxy for capturing HTTP(S) and WS(S) traffic.

proxynotshell-poc

proxypool

一款用于自动切换ip的代理池服务,无需任何依赖，能快速运行。

ps2

A port scanner written purely in PowerShell.

psbypassclm

Bypass for PowerShell Constrained Language Mode

pscx

PowerShell Community Extensions module repository

psdecode

PowerShell script for deobfuscating encoded PowerShell scripts