pwnf Goto Github PK

sharpconflux

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

sharploginprompt

sharpterminator

Terminate AV/EDR Processes using kernel driver

silentbridge

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

sliver

Adversary Emulation Framework

smblaster

SMBlaster is a SMB Share scanner with modular rule-based content check validation.

spnegodown

PoC Tool for SPNEGO Downgrade

spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

terminator

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

threadlessinject-bof

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

threadlessinject-c

This repository implements Threadless Injection in C

titan

Titan: A generic user defined reflective DLL for Cobalt Strike

titanldr

Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH

tokenstomp

C# implementation of the token privilege removal flaw discovered by @GabrielLandau/Elastic

trevorspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

vfae

VMDK Forensic Artifact Extractor (VFAE) is windows based tool written in C++ that extracts files with a known location from VMDK images running the Windows operating system. The tool utilizes the VDDK (Virtual Disk Development Kit) API for the heavy lifting such as mounting, opening, and reading the VMDK selected. When vfae.exe is executed, it c

vlanpwn

VLAN attacks toolkit

vmdkreader

.NET 4.0 Console App to browse VMDK / VHD images and extract files

volumiser

win-brute-logon

Crack any Microsoft Windows users password without any privilege (Guest account included)

win_jelly

Windows GPU rootkit PoC by Team Jellyfish

wmiexec

Set of python scripts which perform different ways of command execution via WMI protocol.

wmiexec-pro

New generation of wmiexec.py

wmkick

WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSMan/WinRM (5985/tcp) to capture NetNTLMv2 hashes.

youmaypasser

You shall pass