brother-x86 Goto Github PK

ntlmv1-multi

NTLMv1 Multitool

nysm

nysm is a stealth post-exploitation container.

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

offensiverust

Rust Weaponization for Red Team Engagements.

ouned

The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning

pamspy

Credentials Dumper for Linux using eBPF

passthecert

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

pentesting-active-directory-cn

域渗透脑图中文翻译版

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

pretender

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

processinjectionwithnim

pyramid

a tool to help operate in EDRs' blind spots

pythonmemorymodule

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

ransomchats

redcsharp

Collection of C# projects. Useful for pentesting and redteaming.

research

Matt's security publications and related materials

rs-memory-module-sys

Rust bindings to https://github.com/fancycode/MemoryModule

runascs

RunasCs - Csharp and open version of windows builtin runas.exe

rust-for-malware-development

This repository contains my complete resources and coding practices for malware development using Rust 🦀.

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

sharpkatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

sharpsecdump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

snafflepy

Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

triplecross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

uac-bof-bonanza

Collection of UAC Bypass Techniques Weaponized as BOFs

uacme

Defeating Windows User Account Control