attackdeveloper Goto Github PK

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

c-sharp-memory-injection

A set of scripts that demonstrate how to perform memory injection in C#

callobfuscator

Obfuscate specific windows apis with different apis

casperstager

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.

covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

crackmapexec

A swiss army knife for pentesting networks

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies from memory and runs them with parameters

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

injectallthethings

Seven different DLL injection techniques in one single project.

injection

injection-1

Windows process injection methods

injectproc

InjectProc - Process Injection Techniques [This project is not maintained anymore]

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

offensive-security-oscp-cheatsheets

OSCP Cheatsheets, Pentesting / Red Teaming Tools and Techniques

rubeus

Trying to tame the three-headed dog.

safetykatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sharp-suite

My musings with C#

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

sharpdump

SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.

sharproast

SharpRoast is a C# port of various PowerView's Kerberoasting functionality.

sharpshooter

Payload Generation Framework

sharptask

SharpTask is a simple code set to interact with the Task Scheduler service api and is compatible with Cobalt Strike.

sharpup

SharpUp is a C# port of various PowerUp functionality.

sharpwmi

SharpWMI is a C# implementation of various WMI functionality.

tikitorch

Process Hollowing

tokenvator

A tool to elevate privilege with Windows Tokens