c3pain Goto Github PK

android-bypass-root-sslpin

For my personal notes

applocker-bypass

Bypassing AppLocker with C#

awesome-incident-response

A curated list of tools for incident response

babukransomwaresourcecode

Leaked source code of the babuk ransomware by VXUG

bitb

Browser In The Browser (BITB) Templates

blackout

kill anti-malware protected processes (BYOVD)

bof-nppspy

Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassuming file.

certify

Active Directory certificate abuse.

certifykit

Active Directory certificate abuse

chaos-rootkit

x64 ring0 rootkit with process hiding, privilege escalation, and capabilities for protecting and unprotecting processes

confuserex

An open-source, free protector for .NET applications

cs-dinvoke-apcinjection

cs-dinvoke-shellcodeinjection

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-1676

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2023-27350

Proof of Concept Exploit for PaperCut CVE-2023-27350

cve-2023-28252-compiled-exe

A modification to fortra's CVE-2023-28252 exploit, compiled to exe

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

enumstrike

Cobalt Strike Aggressor script to automate host and domain enumeration.

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

findfrontabledomains

Search for potential frontable domains

fsociety

gobypassav

整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。

hiddendesktop

HVNC for Cobalt Strike

icmp-transfertools

Transfer files to and from a Windows host via ICMP in restricted network environments.

inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

juicypotatong

Another Windows Local Privilege Escalation from Service Account to System

lockbit-black-builder

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

mimikatz

A little tool to play with Windows security