leftp Goto Github PK

dnsstager

Hide your payload in DNS

dnstake

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

doctrack

Tool to manipulate and insert tracking pixels into Office Open XML documents (Word, Excel).

dpapick

drakus

Drakus allows you to monitor the artifacts and domains used in a Red Team exercise to see if they have been uploaded to certain online malware analysis services.

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

dropengine

DropEngine provides a malleable framework for creating shellcode runners, allowing operators to choose from a selection of components and combine them to create highly sophisticated payloads within seconds.

dumpaadsynccreds

C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD connect database.

dumper2020

Yet another LSASS dumper

dumpert

LSASS memory dumper using direct system calls and API unhooking.

dumpnparse

A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.

eatools

Analysis and manipulation of extended attribute ($EA) on NTFS

edr_userland_hook_checker

Project to check which Nt/Zw functions your local EDR is hooking

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

encrypt

Pseudorandom AES-256 encryption designed to protect shellcode and arbitrary strings. C# and C/C++ compatible.

esc

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

espoofing

Email sender spoofing test tools

etwsessionhijacking

A Poc on blocking Procmon from monitoring network events

evasion

Windows packer

evasiveprocesshollowing

Evasive Process Hollowing Techniques

evasor

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

evtmute

excelntdonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

experiments

Expriments

falconstrike

A stealthy, targeted Windows Loader for delivering second-stage payloads(shellcode) to the host machine undetected

favfreak

Making Favicon.ico based Recon Great again !

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

fibratus

A modern tool for the Windows kernel exploration and tracing

filesearcher