convlabs Goto Github PK

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

autobloody

Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound

beatrev

POC for frustrating/defeating Malware Analysts

bootdoor

Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

cipherscan

A very simple way to find out which SSL ciphersuites are supported by a target.

customprocessingunit

The first dynamic analysis framework for CPU microcode

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

hotload-driver

C++

impacket

Impacket is a collection of Python classes for working with network protocols.

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

krbrelayup-shitsecure

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

manning_module_01

Spring Boot and ReactJs module 01

misc-hfiref0x

Miscellaneous Code and Docs

ml4nce

Machine Learning for Network and Cloud Engineers

network-importer

The network importer is a tool/library to analyze and/or synchronize an existing network with a Network Source of Truth (SOT), it's designed to be idempotent and by default it's only showing the difference between the running network and the remote SOT.

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

pineapple

pinjectra

Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)

powerhuntshares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

racketeer-ransomware-simulation-toolkit

redteamcsharpscripts

C# Script used for Red Team

serverscan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

sharpwhispers

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.

shellcodefluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

sinmapper

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

sysmon-config-cyberops

Sysmon configuration file template with default high-quality event tracing

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.