wizardy0ga Goto Github PK

aadshell

Interactive shell, allowing Azure Active Directory Administrators to access user object sign-in data in a multi-tenant environment. NOTICE: This is not an official Microsoft repository. I am not affiliated with Microsoft.

batch_obfuscator

Batch obfuscator based on the obfuscation method used by the trick bot launcher as described in this article: https://blog.huntresslabs.com/tried-and-true-hacker-technique-dos-obfuscation-400b57cd7dd

bloodslidebox

A repository to document my findings on all the malicious things :)

cruft-shell

A very basic malware targeting Windows, written in C.

cve_2012-2982

This script was written for the 'Intro PoC Scripting' room on TryHackMe.com

cyber-kill-chain

An overview of the Lockheed Martin Cyber Kill Chain, a framework that models the stages that an attacker may go through to achieve a successful cyber attack.

enable-concurrentrdp

processinjectsyscall

A demonstration of remote process injection using direct & indirect syscalls with syswhispers

pyramid-of-pain

An overview of the Pyramid of Pain, a pyramid model that represents a scaling level of impact to threat actor operations when an indicator is successfully responded to at its assigned level.

qwire

A Remote Access Kit for Windows

remotefunctionstomper

A program demonstrating the 'Function Stomping' shellcode execution method for Windows based systems.

slipcrypt

Python based crypter. For use on python files only. Will not work with any other language. Execute encrypted/obfuscated python scripts

slizs-msf-aio

SlizBinksman's Metasploit Framework All In One Helper

thm-road

A write up on the room "Road" from TryHackMe.com

thm-source-cve-2019-15231

A write up on the TryHackMe room Source & a python script to exploit the vulnerability

thm-steel_mountain-cve-2014-6287

A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287

thm-vulnerability_capstone-cve-2018-16763

A write up on the THM room Vulnerability Capstone & Exploit script for CVE-2018-16763.

thm_bolt_write_up

A write up on the Bolt room from TryHackMe.com & re-writing of r3m0t3nu11's PoC exploit script

wormicide

An automated XWorm CnC Denial of Service tool

xdump

Configuration extraction tool for XWorm RAT Client. Tested on XWorm 3.1.

xorntrunner

A shellcode runner using the XOR cipher and NT API calls for evasion and execution tactics.