zzzqzzzz Goto Github PK

asreproast

Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.

backup_dc_registry

A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY

bypassuac

Use ICMLuaUtil to Bypass UAC!

bypassuac-win11-

By write list bypassuac

clmbypassblogpost

This code was used for the blogpost on secjuice.

close-windows-defender

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cqtools

Unpacked tools of CQAcademy

cqtools-mastkeyad

Tools from CQURE Acadamy, Mainly used for attacking windows DPAPI

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

h2c-smuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

keethief

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

lapstoolkit

Tool to audit and attack LAPS environments

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

php-powershell

A PHP wrapper template to execute PowerShell payloads

ro1t

rubeus

Trying to tame the three-headed dog.

service-exe

This is Visual C# code that will create a new user named "mcfatty" when run as a service.

sharpedrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

sharpgpoabuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

threatcheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

uacme

Defeating Windows User Account Control

websocket-smuggle

Issues with WebSocket reverse proxying allowing to smuggle HTTP requests

whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.