pwnf Goto Github PK

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

intune-acsc-windows-hardening-guidelines

Collection of Intune policies that could assist with implementing ACSC's Windows hardening guidance.

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11

kaynldr

KaynLdr is a Reflective Loader written in C/ASM

killdefender

A small POC to make defender useless by removing its token privileges and lowering the token integrity

kiterunner

Contextual Content Discovery Tool

krbtgs

old postex for grabbing a krbtgs for my current user

lapsdumper

laz-y-templates

Laz-y project compatible C# templates for shellcode injection.

ldapnomnom

Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)

ldapwordlistharvester

A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

ldeep

In-depth ldap enumeration utility

lightsout

Generate an obfuscated DLL that will disable AMSI & ETW

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

linksiren

linwinpwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

localpotato

lofl

Living Off the Foreign Land setup scripts

masky

Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory

mfade

A python port of @dafthack's MFAsweep with some added OPSEC functionality. MFAde can be used to find single-factor authentication failure points in Mircrosoft Services.

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

microsoft365_devicephish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

misconfiguration-manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

ms17-010

MS17-010

mssqlrelay

Tool for MSSQL relay audit and abuse

n0kovo_subdomains

An extremely effective subdomain wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

nanodump

A crappy LSASS dumper with no ASCII art

net-creds

Sniffs sensitive data from interface or pcap

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

nimpackt-v1

Nim-based assembly packer and shellcode loader for opsec & profit