Mr.Un1k0d3r

EDRs. C

SCShell. Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

PowerLessShell. Run PowerShell command without invoking powershell.exe

DKMC. DKMC - Dont kill my cat - Malicious payload evasion tool

RedTeamPowershellScripts. Various PowerShell scripts that may be useful during red team exercise

MaliciousMacroGenerator. Malicious Macro Generator

ThunderShell. Python / C# Unmanaged PowerShell based RAT

RedTeamCSharpScripts. C# Script used for Red Team

RedTeamCCode. Red Team C code repo

CatMyPhish. Search for categorized domain

.NetConfigLoader. .net config loader

PoisonHandler. lateral movement techniques that can be used during red team exercises

MaliciousClickOnceGenerator. Quick Malicious ClickOnceGenerator for Red Team

Windows-SignedBinary. Python

AMSI-ETW-Patch. Patch AMSI and ETW

ADHuntTool. official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

Shellcoding. Shellcoding utilities

WindowsDllsExport. A list of all the DLLs export in C:\windows\system32\

ATP-PowerShell-Scripts. Microsoft Signed PowerShell scripts

Cookie-and-Handle-Stealer. C or BOF file to extract WebKit master key to decrypt user cookie

DLLsForHackers. Dll that can be used for side loading and other attack vector.

Elevate-System-Trusted-BOF. C

AzureRedOps. Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID

MaliciousDLLGenerator. DLL Generator for side loading attack

DotnetNoVirtualProtectShellcodeLoader. load shellcode without P/D Invoke and VirtualProtect call.

RedTeamScripts. Repo with various Red Team scripts

SCT-obfuscator. Cobalt Strike SCT payload obfuscator

SPFAbuse. SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

RemoteProcessInjection. C# remote process injection utility for Cobalt Strike

Base64-Obfuscator. Simple PowerShell Base64 encoder to avoid detection of your malicious payload

SearchIPOwner. Search public IP owner through ARIN

MsGraphFunzy. Scripts to interact with Microsoft Graph APIs

BOFCode. Bunch of BOF files

pentest-tools. Custom pentesting tools

SideChannelAttack. Side Channel script

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

blog.mr.un1k0d3r.com. Mr.Un1k0d3r.com blog

CVE-2021-1675. C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

PPLDump_BOF. A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.

openedr. Open EDR public repository

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

CVE-2020-1472. Test tool for CVE-2020-1472

impacket. Impacket is a collection of Python classes for working with network protocols.