Matt Nelson

Generate-Macro. This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

Misc-PowerShell-Stuff. random powershell goodness

Invoke-LoginPrompt. Invokes a Windows Security Login Prompt and outputs the clear text password.

Invoke-AltDSBackdoor. PowerShell

Powershell-Payload-Excel-Delivery. Uses Invoke-Shellcode to execute a payload and persist on the system.

MessageBox. PoC dlls for Task Scheduler COM Hijacking

OutlookPersistence. PowerShell

Powershell-C2. PowerShell

Old-Powershell-payload-Excel-Delivery. This version touches disk for registry persistence.

windows-operating-system-archaeology. windows-operating-system-archaeology @Enigma0x3 @subTee

PenTesting-Scripts. A ton of helpful tools

atomic-red-team. Small and highly portable detection tests.

PowershellProfile. Abuses Powershell Profiles

PowerShell-Suite. My musings with PowerShell

oleviewdotnet. A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

DeviceGuardBypassMitigationRules. A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses

Empire. Empire is a pure PowerShell post-exploitation agent.

sandbox-attacksurface-analysis-tools. Set of tools to analyze and attack Windows sandboxes.

BCD. BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functionality of the functions in this module mirror that of bcdedit.exe.

bugs.

misc-1. VBScript

Misc. Visual Basic

delphi-code-coverage. This is a clone of the code coverage tool for Delphi on http://code.google.com/p/delphi-code-coverage/

windows-itpro-docs. This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

blogstuff.

OPCDE. OPCDE DXB 2017 Materials

DotNetInteropDemos. A set of demos and a PowerShell module to interact with DotNetInterop.

impacket. Impacket is a collection of Python classes for working with network protocols.