NTPWEdit Version 0.7 Modified by VoidRegreso

This code shows how to silently install Web Store extensions on Google Chrome on MacOS

SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303.

A beacon object file implementation of PoolParty Process Injection Technique.

A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, function hooking or Import Address Table (IAT) modification.

Open source templates you can use to bootstrap your security programs

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allo…

Create your own AirTag with OpenHaystack, but without the need to own an Apple device

poc for CVE-2024-38063 (RCE in tcpip.sys)

Module for creating GPOs in AD, that add groups in Local Admins or RDP Users on specified computers

GitHub Attack Toolkit - Extreme Edition

A simple and fast anti-censorship tool written in Go

Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!

Make everyone in your VLAN ASRep roastable

AWS Attack Path Management Tool - Walking on the Moon

Microsoft RDP Client Extensions

🖧🔍 WIFI / LAN intruder detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.

Azure administrative tiering based on known attack paths

HookChain: A new perspective for Bypassing EDR Solutions

MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.

SSHamble: Unexpected Exposures in SSH

When good OAuth apps go rogue. Documents observed OAuth application tradecraft

A VSCode plugin to assist with BOF development.

DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the ori…

Leak of any user's NetNTLM hash. Fixed in KB5040434

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions