leftp Goto Github PK

credmanbof

crt

Contact: [email protected]

cs-bofs

Collection of CobaltStrike beacon object files

cs-rdll-ipc-example

Example code for using named pipe output with beacon ReflectiveDLLs

csharp

Various C# projects for offensive security

csharp-alt-shellcode-callbacks

A collection of (even more) alternative shellcode callback methods in CSharp

csharpsetthreadcontext

C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread

csharpwinrm

.NET 4.0 WinRM API Command Execution

cssg

Cobalt Strike Shellcode Generator

cthreadhijack

Beacon Object File (BOF) for remote process injection via thread hijacking

cve-2020-0796-bof

cve-2020-0796-rce-poc

CVE-2020-0796 Remote Code Execution POC

cve-2021-1675-lpe

Local Privilege Escalation Edition for CVE-2021-1675

cve-2021-1727

cve-2021-21551

Exploit to SYSTEM for CVE-2021-21551

cve-2021-26855

CVE-2021-26855 exp

cve-2021-40444

CVE-2021-40444 PoC

cyberarktools

Some Python tooling to for example try to decrypt CyberArk .cred credential files

danspecial

Weaponizing Gigabyte driver for priv escalation and bypass PPL

darkloadlibrary

LoadLibrary for offensive operations

dazzleup

A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.

dcompotato

Some Service DCOM Object and SeImpersonatePrivilege abuse.

dearg-thread-ipc-stealth

A novel technique to communicate between threads using the standard ETHREAD structure

deepsea

DeepSea Phishing Gear

delete-self-poc

A way to delete a locked file, or current running executable, on disk.

detectionlabelk

DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk.

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dinvokedupetokenandthreadswitcheroo

disableppldriverpoc

Disable PPL via custom driver and dump lsass

dllfrommemory-net

C# library to load a native DLL from memory without the need to allow unsafe code