l0ss Goto Github PK

certify

Active Directory certificate abuse.

chump2trump

Slides from my AD Privesc talk at WAHCKon 2017

daft

DAFT: Database Audit Framework & Toolkit

domainlab

Vagrant & Packer scripts mangled from clong's DetectionLab to build an AD testing environment.

esc

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

fox

A companion tool for BloodHound offering Active Directory statistics and number crunching

furbyconnect

l0ss and swarley's bits and pieces from the talk 'We have no idea how to hack a Furby Connect from BSides Canberra 2017.

get-gptrashfire

B-Sides CBR 2018 talk about group policy and Grouper

group3r

You probably want https://github.com/Group3r/Group3r

grouper

A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)

grouper2

Find vulnerabilities in AD Group Policy

kali-packer-vagrant

Packer and Vagrant configurations for Kali Linux

makemikesad

Slides from my purplecon NZ talk in 2018

metasploit-framework

Metasploit Framework

misc

dotfiles, whatever.

rubeus

Trying to tame the three-headed dog.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sharphound

C# Data Collector for BloodHound

sharphoundcommon

Common library used by SharpHound.

sharpup

SharpUp is a C# port of various PowerUp functionality. Fork includes a couple of extra checks.

threatcheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

zmk-config