epichoxha Goto Github PK

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

decrypt-tfssecretvariables

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

detect-hooks

Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dinjector-1

discord.sh

Write-only command-line Discord webhook integration written in 100% Bash script

donpapi

Dumping DPAPI credz remotely

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

edrs

efspotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

enchelp

experienced-pentester-osep

extracteddefender

ffuf-scripts

Scripts to help with different ffuf tasks and workflows

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

getfgpp

Get Fine Grained Password Policy

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

gmsapasswordreader

go-windapsearch

Utility to enumerate users, groups and computers from a Windows domain through LDAP queries

go365

An Office365 User Attack Tool

go4arun

Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process

gofrette

Gofrette is a reverse shell payload developed in Golang that bypasses Windows defender and many others anti-virus.

gomapenum

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

gophish

Open-Source Phishing Toolkit

goserv

gpoddity

The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).

hacktricks-cloud