rythmstick Goto Github PK

amsitrigger

The Hunt for Malicious Strings

cobaltstrike

CobaltStrike's source code

covenantc2deploy

cve-2018-19320

Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

cve-2019-0841

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

cve-2019-1064

CVE-2019-1064 Local Privilege Escalation Vulnerability

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

farmer

g_cioptions-offsets

g_CiOptions offset from CiInitialize

ger

getcompliant

Extracts passwords from file that match specified complexity

libesedb

Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.

lsass-shtinkering

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

misc

perfusion

Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)

proxypunch

Finding SSL Blindspots for Red Teams

psm

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

rythmstick.github.io

sharp-suite

My musings with C#

sharpup

SharpUp is a C# port of various PowerUp functionality.

smbghost_rce_poc

spray

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing