subat0mik Goto Github PK

.github

advanced-process-injection-workshop

apollo

A .NET Framework 4.0 Windows Agent

bypasses

chronology

SpecterOps Historical Records

dnspy

.NET debugger and assembly editor

docker-bloodhound

BloodHound Docker Ready to Use

elevatekit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

journey_to_osce

A curated collection of resources that may be beneficial for anyone pursuing the OSCE.

ldaprelayscan

Check for LDAP protections regarding the relay of NTLM authentication

minidump

Simple C# program to call MiniDumpWriteDump to dump LSASS memory.

misconfiguration-manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

msf_rc_scripts

mssql_scripts

Various scripts/tools for enumerating and abusing MSSQL.

osce-prep

A list of freely available resources that can be used as a prerequisite before taking OSCE.

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

personal_site

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

pezor

Open-Source PE Packer

printspoofer.net

rdpthief_dllinjection

scripts

scshell

SCShell implementation from scratch done as part of the PEN-300 course.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

sharpsccm

A C# utility for interacting with SCCM

shellcode-runners

Various shellcode runners

shellcodewrapper

Shellcode wrapper with encryption for multiple target languages

whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

whoamsi

An effort to track security vendors' use of Microsoft's Antimalware Scan Interface