malcomvetter Goto Github PK

activedirectoryservices

A more full featured C# API for connecting to and managing Active Directory (AD) and Lightweight Directory (AD-LDS) instances, complete with consumer application examples.

antidebug

PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.

bluescreenonexit

PoC of a protected process causing a blue screen if killed.

burp-hash

burphmac

An HMAC authentication header plugin for Burp Proxy, written in Python.

cape

Malware Configuration And Payload Extraction

certcheck

Programmatically access a TLS certificate chain in C++ and C#

chromepasswords

csexec

An implementation of PSExec in C#

diehard

PoC: process watcher patterns to make killing a process hard.

dns

A DNS library written in C#

dnscache

ehud

Simple windows executable for a sneaky backdoor admin account.

fake-ransomware

A non-destructive, but ANNOYING ransomware lookalike for use with red team exercises.

happysad

Sometimes you just need a Happy EXE and a Sad EXE

heapsurf

A credit card memory scraper written in C#

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

kata

A collection of breach and post-exploitation kata for the red teamer to constantly train to maintain proficiency.

luhnforce

A C# tool for brute forcing Credit Card numbers with valid Luhn checks.

luhnpy

Simple python script for validating Luhn checks on an input file of potential credit cards.

managedinjection

A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge

memscan

Searches for strings, regex, credit card numbers of magnetic stripe card tracks in a Windows process's memory space

namedpipes

A pattern for client/server communication via Named Pipes via C#

netapi

Example for how to call the NetAPI for local user/group management in Windows via C++

netstat

periscope

Fully Integrated Adversarial Operations Toolkit (C2, stagers, agents, ephemeral infrastructure, phishing engine, and automation)

planetexpressstocktracker

A silly little example how to trojan a C# windows app, as demonstrated at the southwest region CCDC competition.

protectprocessfromjoeuser

PoC: Protecting Joe User from killing his own process.

readline

A Pure C# GNU-Readline like library for .NET/.NET Core

runas

An example in C# for programmatically calling UAC to escalate to admin