bohops Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

cve-2021-40444-sample

CVE-2021-40444 Sample

dynamicdotnet

A collection of various and sundry code snippets that leverage .NET dynamic tradecraft

ghostbuild

GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects

iisapppoolcreds

Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

passh

A simple Python SSH server that reveals passwords of connecting clients

prua

PASSWORD RE-USE AUDITOR

pyrevtun

A pure Python reverse tunnel/reverse port forward utility (prototype) to forward TCP protocols over SSL/TLS.

random

Assorted scripts and one off things

rogueassemblyhunter

Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes.

sharpcradle

sharprdphijack

A POC Remote Desktop (RDP) session hijack utility for disconnected sessions

sigma

Main Sigma Rule Repository

ultimatewdacbypasslist

A centralized resource for previously documented WDAC bypass techniques

windows-itpro-docs

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

wsman-winrm

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object

yaratools

Over 100K open-source YARA signatures evaluated against over 280K files to give insights into the performance of each YARA rule.