justinforbes Goto Github PK

sharpexcelibur

Read Excel Spreadsheets (XLS/XLSX) using Cobalt Strike's Execute-Assembly

sharpgpoabuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

sharphandler

sharplaps

Retrieve LAPS password from LDAP

sharplnkgen-ui

UI for creating LNKs

sharploginprompt

sharpmad

C# version of Powermad

sharpnopsexec

Get file less command execution for lateral movement.

sharpsphere

.NET Project for Attacking vCenter

sharpsql

Simple C# implementation of PowerUpSQL

sharpsword

Read the contents of DOCX files using Cobalt Strike's Execute-Assembly

sharpteamsdump

Dump Teams conversations

sharptransactedload

Load .net assemblies from memory while having them appear to be loaded from an on-disk location.

sharpziprunner

Executes position independent shellcode from an encrypted zip

shellcodefluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

shellcodeloader

shellcodeloader

shhhloader

SysWhispers Shellcode Loader (Work in Progress)

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

sim

C# User Simulation

siofra

sireprat

Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)

slayer

Slayer

smbsr

Lookup for interesting stuff in SMB shares

smug_fu3k

sn1per

Attack Surface Management Platform | Sn1perSecurity LLC

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

sparkler

The tool creates a Microsoft Active Directory Domain with a structure and objects for learning.

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

spoolsploit

A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.