sinw0lf Goto Github PK

reconftw

Simple script for full recon

redeye

redrabbit

Red Team PowerShell Script

redteam-offensivesecurity

Tools & Interesting Things for RedTeam Ops

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

redteambins

Compiled binaries and ready code for Red Teaming

reflective_pe_loader

Program to load a PE inside memory on another process.

remotefileexecute

roastinthemiddle

rs-shell

A dirty PoC for a reverse shell with cool features in Rust

rtoolz

A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.

safetykatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

sandboxppl

Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scoutsuite

Multi-Cloud Security Auditing Tool

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

seth

Perform a MitM attack and extract clear text credentials from RDP connections

sharem

SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.

sharpexec

sharpkatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

sharpkiller

Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8

sharpreflectivepeinjection

reflectively load and execute PEs locally and remotely bypassing EDR hooks

sharpshellpipe

This lightweight C# demo application showcases interactive remote shell access via named pipes and the SMB protocol.

sharpterminator

Terminate AV/EDR Processes using kernel driver

sharpveeamdecryptor

Decrypt Veeam database passwords

shellcode-encryption-cpp

Encrypting shellcode to Bypass AV

shellcode-injection-techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

shellcodeencoder

Just a python script, which will encode the msfvenom raw type shellcode and give as C# byte array.

shellcodefluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents