gavz Goto Github PK

invoke-commandas

Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

invoke-credentialphisher

invoke-dcompowerpointpivot

Executes lateral movement through PowerPoint DCOM objects

invoke-dllclone

Koppeling x Metatwin x LazySign

invoke-dosfuscation

Cmd.exe Command Obfuscation Generator & Detection Test Harness

invoke-nanodump

HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection

invoke-neutralizeav

Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting

invoke-obfuscation

PowerShell Obfuscator

invoke-phant0m

Windows Event Log Killer

invoke-piper

Forward local or remote tcp ports through SMB pipes.

invoke-powerthief

The PowerThIEf, an Internet Explorer Post Exploitation library

invoke-printdemon

invoke-psimage

Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

invoke-psobfuscation

An in-depth approach to obfuscating the individual components of a PowerShell payload whether you're on Windows or Kali Linux.

invoke-pwaudit

A PowerShell tool which provides an easy way to check for shared passwords between Windows Active Directory accounts

invoke-sharploader

invoke-socksproxy

Socks proxy server using powershell. Supports local and reverse connections for pivoting.

invoke-wmilm

ioc

Threat Intel IoCs + bits and pieces of dark matter

ioctl.py

ioctldump

ioctlpus

IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).

iodine

Official git repo for iodine dns tunnel

ioninja-scripts

Official plugins for IO Ninja

iori_loader

UUID shellcode Loader with dynamic indirect syscall implementation, syscall number/instruction get resolved dynamicaly at runtime, and the syscall number/instruction get unhooked using Halosgate technique. Function address get resolved from the PEB by offsets and comparaison by hashes

ioring_demos

A repository for I/O ring demos, use cases and performance testing on Windows

ioringreadwriteprimitive

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2

ios-analyticsd-pre14.7-exploit

ios-breakmedaddy

ios tingz