devbabygo Goto Github PK

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

ahnlab-0day

AHNLab 0day, LPE

apc-research

APC Internals Research Code

badpotato

Windows 权限提升 BadPotato

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crossinject

x86/x64 dll injector

darkloadlibrary

LoadLibrary for offensive operations

dotnethook

A hook proof of concept with no native dependencies. Hook both .NET methods (even framework methods) and Native methods entirely in .NET.

dynamicwrapperex

x64 Registration-Free In-Process COM Automation Server.

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

ketshash

A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.

libscanhook

memorymodulepp

MemoryModule which compatible with Win32 API and support exception handling

monkeyworks

netntlmtosilverticket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

rdp-tunnel

Pre-compiled tools to tunnel TCP over RDP Connections

redpeanut

RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.

scyllahidedetector2

Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sessiongopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.

shad0w

A post exploitation framework designed to operate covertly on heavily monitored enviroments

sharpadidnsdump

c# implementation of Active Directory Integrated DNS dumping (authenticated user)

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

sharphandler

sharphound3

C# Data Collector for the BloodHound Project, Version 3

sharpkatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

sharpsecdump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py