leftp Goto Github PK

lepus

Subdomain finder

lexmark

littlecorporal

LittleCorporal: A C# Automated Maldoc Generator

lockdexedemo

A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/

lockless

Lockless allows for the copying of locked files.

logmepwn

A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lolbits

C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.

lsarelayx

NTLM relaying for Windows made easy

lsasssilentprocessexit

Command line interface to dump LSASS memory to disk via SilentProcessExit

m365_groups_enum

Enumerate Microsoft 365 Groups in a tenant with their metadata

macc2

python-based Mac Command and Control that uses internal API calls instead of command line utilities. Useful for aiding blue teams in building macOS detections. Author: Cedric Owens

macrome

Excel Macro Document Reader/Writer for Red Teamers & Analysts

maliciousclickoncemsbuild

Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.

malleable

malproxy

Proxy system calls over an RPC channel

malseclogon

A little tool to play with the Seclogon service

mappinginjection_csharp

MappingInjection via csharp

matryoshka

Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.

mediumtohighil_test

memfiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

memory-module-loader

An implementation of a Windows loader that can load dynamic-linked libraries (DLLs) directly from memory

memreader_bof

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

microsoft-kerberos

I have created a small C# project that requests a Ticket Granting Service (TGS) ticket using KerberosSecurityTokenProvider to use for Kerberoasting and an option to request an Azure AD SSO TGS.

minesweeper

Windows user-land hooks manipulation tool.

minhook.net

A C# port of the MinHook API hooking library

minidump

alternative to procdump

minos-static

static binaries for linux

mirrordump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory