brother-x86 Goto Github PK

3snake

Tool for extracting information from newly spawned processes

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

atomldr

A DLL loader with advanced evasive features

bad-bpf

A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

bof-regsave

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

boopkit

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

certipy

Tool for Active Directory Certificate Services enumeration and abuse

chalalastwitter

cobaltstrike-aggressor-scripts

A collection of Cobalt Strike Aggressor scripts.

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

cookie-monster

BOF to steal browser cookies & credentials

cortex

Powerful Observable Analysis Engine

crackmapexec

A swiss army knife for pentesting networks

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

darkloadlibrary

LoadLibrary for offensive operations

daybird

Extension functionality for the NightHawk operator client

denim

Automated compiler obfuscation for nim

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

dinvoke_thewoover

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

dllfrommemory-net

C# library to load a native DLL from memory without the need to allow unsafe code

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

duckloads

Buckloads of duckloads

dumpkernel-s1

A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80

ebpfkit

ebpfkit is a rootkit powered by eBPF

edrs

edrsandblast

entropyreducer

Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists