b4rtik Goto Github PK

allthethingsexec

Executes Blended Managed/Unmanged Exports

atpminidump

Evading WinDefender ATP credential-theft

covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

donutcs

dem sharp donuts

donutsupport

RedPeanut Support Classes

emailraider

Powershell MS Outlook enumeration and phishing tool

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

hiddenpowershelldll

https_csharp_server

Implementing a Multithreaded HTTP/HTTPS Debugging Proxy Server in C# xref. `https://www.codeproject.com/Articles/93301/Implementing-a-Multithreaded-HTTP-HTTPS-Debugging`

jsrat-py

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

liferay-portal

mcfridafee

metasploit-execute-assembly

Custom Metasploit post module to executing a .NET Assembly from Meterpreter session

metasploit-framework

Metasploit Framework

mimikore

.NET 5 Single file Application

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

powershell-ad-recon

PowerShell Scripts I find useful

powertheshell

printnightmare

processhacker

svn://svn.code.sf.net/p/processhacker/code

redpeanut

RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

roguepotato

Another Windows Local Privilege Escalation from Service Account to System

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

sharpadidnsdump

c# implementation of Active Directory Integrated DNS dumping (authenticated user)

sharpkatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

sharploadimage

Hide .Net assembly into png images

sharpminidump

Create a minidump of the LSASS process from memory