Lists (1)
Stars
A Go implementation of Cobalt Strike style BOF/COFF loaders.
M365/Azure adversary simulation tool designed to simulate adversary techniques and generate attack telemetry.
A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.
HookChain: A new perspective for Bypassing EDR Solutions
Info on how to use Kerberos KDC on a non-domain joined host
A VSCode plugin to assist with BOF development.
BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.
.NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit is loading a malicious DLL using Task Scheduler (MMC) to bypa…
HTTP flyover tool based on the httpx library by ProjectDiscovery
Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scenarios.
C++ Staged Shellcode Loader with Evasion capabilities.
Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
A command and control framework written in rust.
real time face swap and one-click video deepfake with only a single image
Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI
Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.
Tool to check for dependency confusion vulnerabilities in multiple package management systems
PoC for using MS Windows printers for persistence / command and control via Internet Printing
A vulnerability scanner for container images and filesystems
Unorthodox and stealthy way to inject a DLL into the explorer using icons
A slightly more fun way to disable windows defender + firewall. (through the WSC api)