a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Active Directory certificate abuse.

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

This program is designed to demonstrate various process injection techniques

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Spartacus DLL/COM Hijacking Toolkit

PoCs and tools for investigation of Windows process execution techniques

Framework for Kerberos relaying

C# Script used for Red Team

Self-developed tools for Lateral Movement/Code Execution

C# obfuscator that bypass windows defender

A C# utility for interacting with SCCM

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

Various ways to execute shellcode

A simple shell code encryptor/decryptor/executor to bypass anti virus.

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

A tool to help query AD via the LDAP protocol

A New Exploitation Technique for Visual Studio Projects

Persistence by writing/reading shellcode from Event Log

Materials for the workshop "Red Team Ops: Havoc 101"

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

Executes position independent shellcode from an encrypted zip

COM Hijacking VOODOO

Fully modular persistence framework

LittleCorporal: A C# Automated Maldoc Generator

All my Source Codes (Repos) for Red-Teaming & Pentesting + Blue Teaming

Malware development for red teaming workshop