marcosd4h Goto Github PK

abopp

Ejercicios y teoría sobre explotación de binarios y búsqueda de vulnerabilidades.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

ad-security-workshop

Resources for our Active Directory security workshops

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

afl-training

Exercises to learn how to fuzz with American Fuzzy Lop

afl-unicorn

afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.

aggressorscripts

Aggressor scripts for use with Cobalt Strike 3.0+

alcatraz

x64 binary obfuscator

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

angryorchard-original

Original proof of concept I submitted to brokers demonstrating the vulnerability in hopes of getting rid of it.

appcontainersandbox

An example sandbox using AppContainer (Windows 8+)

asmhalosgate

x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks

assembly-fun

Just a collection of NASM code while I learn/refresh my Assembly understanding

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

awesome-sec-talks

A collected list of awesome security talks

awesome-windows-kernel-security-development

back2thefuture

Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

be-injector

beaconhunter

Detect and respond to Cobalt Strike beacons using ETW.

bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction.

binskim

A binary static analysis tool that provides security and correctness results for Windows portable executables.

blackbone

Windows memory hacking library

bloodhound

Six Degrees of Domain Admin

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

boofuzz

A fork and successor of the Sulley Fuzzing Framework

byeintegrity-uac

Bypass UAC by hijacking a DLL located in the Native Image Cache

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.