agentzero

A client-server tool for remote LLMNR/NBTNS poisoning

aws-malware-lab

Creation of a laboratory for malware analysis in AWS

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

binary-exploitation-defenses-tsar

Code for An Oral History of Binary Exploitation Defenses

blue-jupyter

Jupyter Notebooks for the Blue Team

bofs

Cobalt Strike Beacon Object Files

bsides-nashville-identity-crisis

Identity Crisis: Combating M365 Account Takeovers at Scale (BSides Nashville 2024)

buffer_overflow

Jupyter Notebook for Vanilla Buffer Overflow

certipy

Tool for Active Directory Certificate Services enumeration and abuse

clarion

The clarion call tells you if someone is logging into an AitM proxy that is proxying your M365 login page

cloudy-with-a-chance-of-malware

Terraform repo for "Cloudy with a Chance of Malware"

cobaltnotion

A spin-off research project. Cobalt Strike x Notion collab 2022

conti-leaks-englished

Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cve-2021-38699-reflected-xss

Multiple Reflected XSS in TastyIgniter v3.0.7 Restaurtant CMS

cve-2021-38699-stored-xss

Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS

cve-2021-38817-remote-os-command-injection

Remote OS Command Injection in TastyIgniter v3.0.7 Sendmail Path field

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cve-2022-33891

Apache Spark Shell Command Injection Vulnerability

cve-2022-42889-text4shell-docker

Dockerized POC for CVE-2022-42889 Text4Shell

disctopia-c2

Windows Backdoor that is controlled through Discord

docker-elk

The Elastic stack (ELK) powered by Docker and Compose.

dracula-css-notion-super

The Dracula color theme for Notion/Super.so sites. I spent a while on this so I don't want to lose it.

emulation-workshop

The repository accompanying the Buer Emulation workshop

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

gitdemo2

graphrunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

graphspy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

hardyharhar