Lists (24)
Active Directory
Brute Force
Cheat Sheets
Command & Control
Credential Dumping
Digital Forensics
Exploits
Generic
Hardware Attacks
HIDS
Incident Response
Leaks
Logging
Memory Forensics
Penetration Testing
Post Exploitation
Privilege Escalation
Reverse Engineering
Scanners
Threat Hunting
VMs
Web Apps
Webshells
Wordlists
Stars
Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
The Binary Analysis Metadata tool gathers information about Windows binaries to aid in their analysis. #nsacyber
Guidance for mitigation web shells. #nsacyber
Active Directory and Internal Pentest Cheatsheets
The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Dorks Eye Google Hacking Dork Scraping and Searching Script. Dorks Eye is a script I made in python 3. With this tool, you can easily find Google Dorks. Dork Eye collects potentially vulnerable web…
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
A python script used to parse the SAM registry hive.
Detect WFP filters blocking EDR communications
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
OpenCore configuration for running macOS on Windows Hyper-V.
NukeAMSI is a powerful tool designed to neutralize the Antimalware Scan Interface (AMSI) in Windows environments.
Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and published in his brilliant post at: https://googleprojectzero.blogspo…
Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradec…
C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
.NET Project for performing Authenticated Remote Execution