yakir2b Goto Github PK

besotoken

A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

botpeass

Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.

certsync

Dump NTDS with golden certificates and UnPAC the hash

command-and-control-php

Command And Control Framework base HTTP GUI #CommandControl #RedTeam #Malware #PHPMalware #CnC

cve-2023-3519

RCE exploit for CVE-2023-3519

cve-2023-46747-rce

exploit for cve-2023-46747

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

localpotato

locksmith

A small tool built to detect and fix common misconfigurations in Active Directory Certificate Services.

magiskonwsa

Integrate Magisk root and Google Apps (OpenGApps) into WSA (Windows Subsystem for Android)

mhddos

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

nimexec

Fileless Command Execution for Lateral Movement in Nim

npk

A mostly-serverless distributed hash cracking platform

ntlmthief

pentest-resources

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

rasmanpotato

Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do

rtoolz

A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.

shopping

In-Stock Pinging Telegram Bot Infrastructure In AWS

wce

This Python tool enables network node command and exfiltration while applying OPSEC to ensure the process is hidden by transmitting commands through window flags.

windows_lpe_afd_cve-2023-21768

LPE exploit for CVE-2023-21768

wtsimpersonator

WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!