fancysauced Goto Github PK

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

aggressivegadgettojscript

A Cobalt Strike Aggressor script to generate GadgetToJScript payloads

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

azureoutlookc2

Azure Outlook Command & Control. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP = Abuse Microsoft Graph API for C2 Operations.

bettersafetykatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

bloodhound

Six Degrees of Domain Admin

bloodhound.py

A Python based ingestor for BloodHound

bloodhoundqueries

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

bofhound

Generate BloodHound compatible JSON from logs written by ldapsearch BOF and pyldapsearch

bofs

Collection of Beacon Object Files

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

certipy

Tool for Active Directory Certificate Services enumeration and abuse

chisel

A fast TCP/UDP tunnel over HTTP

chisel-strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

clipboardwindow-inject

CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback

clone-all-repos

cloudcopy

This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cobalt_strike_extension_kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.

confuserex

An open-source, free protector for .NET applications

credbandit

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

cs-situational-awareness-bof

cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2021-21972

Proof of Concept Exploit for vCenter CVE-2021-21972

defendercheck

Identifies the bytes that Microsoft Defender flags on.