codyjohnston Goto Github PK

aadcookiespoof

Azure AD Identity Protection Cookie Spoofing

abot

C# web crawler built for speed and flexibility. Please star this project! +1. Contact me with exciting opportunities!!

atomicsyscall

Tools and PoCs for Windows syscall investigation.

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bofallthethings

Creating a repository with all public Beacon Object Files (BoFs)

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

chisel

A fast TCP/UDP tunnel over HTTP

chisel-strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

createhiddenaccount

A tool for creating hidden accounts using the registry.

cve-2022-26937

A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows MFS server.

datagridhelp

Hopefully helping someone with datagrid color blending.

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

defenderswitch

Stop Windows Defender using the Win32 API

dejavu

DejaVU - Open Source Deception Framework

detect-responder

dfscoerce

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

discordbot

A sample bot for Discord using Discord.Net 0.9 (Deprecated)

driver.net

Lightweight and flexible library to load and communicate with kernel drivers on Windows.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

foliage

Public variation of FOLIAGE ( original developer )

honeycreds

HoneyCreds network credential injection to detect responder and other network poisoners.

identitywithroles

A quick example project to help people understand how to configure role based authorization with .Net Core Identity

jackit

JackIt - Exploit Code for Mousejack

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

ldapsigncheck

Beacon Object File & C# project to check LDAP signing