c0bber Goto Github PK

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

alcatraz

x64 binary obfuscator

angryorchard

A kernel vulnerability used to achieve arbitrary read-write on Windows prior to July 2022

anonymoussmbserver

一个能快速开启和关闭匿名SMB共享的红队脚本

autochk-rootkit

Reverse engineered source code of the autochk rootkit

blacklotus-1

BlackLotus UEFI Windows Bootkit

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

chromepasswords

chrometools

A collection of tools to abuse chrome browser

csexec

An implementation of PSExec in C#

csharp-tools

.NET C# Tools

csharpsshcmdrunner

读取txt中指令，进而顺序执行SSH命令。我是用来配合CI编译Linux虚拟机中代码，并进行代码执行测试。

cve-2021-21974

POC for CVE-2021-21974 VMWare ESXi RCE Exploit

cve-2021-28482-exchange-poc

POC from TestANull for CVE-2021-28482 on Exchange Server

cve-2021-36934

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

cve-2022-27925

Zimbra CVE-2022-27925 PoC

cve-2023-21707

CVE-2023-21707 EXP

cve-2023-36745

dcerpc-pipe-scan

Identify accessible MSRPC bindings over named pipes.

dns

A DNS library written in C#

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

doublepulsar

An unfinished DOUBLEPULSAR clone. Set to be redone at a later date

exploits

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

getsystem

webshell下提权执行命令 Reference:https://github.com/yusufqk/SystemToken

ghost-in-the-logs

Evade sysmon and windows event logging

goddi

goddi (go dump domain info) dumps Active Directory domain information

handlekatz

PIC lsass dumper using cloned handles

inject-assembly

Execute .NET in an Existing Process

keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

kernelious-rootkit

a dkom rootkit that targets windows x64 systems. the rootkit hooks and edits criticl memory sections in order to hide different resources.