wkl-sec Goto Github PK

dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

docker-cobaltstrike

Docker container for running CobaltStrike 4.7 and above

funcaddresspro

A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.

gregsbestfriend

GregsBestFriend process injection code created from the White Knight Labs Offensive Development course

hiddendesktop

HVNC for Cobalt Strike

illicit-services-enum-script

layeredsyscall

Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR hooks in Windows.

malleable-cs-profiles

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

okta-mfa-check

OKTA MFA Check using Python and Selenium. Tool checks valid OKTA accounts to determine which MFA options are enabled/disabled

stackmask

A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.

warmer

Selenium-based Python script to automate sending emails to warm up your sender reputation and improve email deliverability

winsocky

Winsocket for Cobalt Strike.

wkl-gophish

WKl Gophish based on Sneaky Gophish

wkl-passwords

Wordlist, rules and masks from White Knight Labs

wmiexec

Set of python scripts which perform different ways of command execution via WMI protocol.