jagsblast

gopacket. A complete Go port of Impacket - 63 CLI tools and 24 libraries for Windows & Active Directory protocol attacks, compiled to a single dependency-free binary.

toastnotify-bof. abusing windows toast notifications for fun and user manipulation

Detect-msDS-KeyCredentialLink. Detect msDS-KeyCredentialLink Changes

CS-Situational-Awareness-BOF. Situational Awareness commands implemented using Beacon Object Files

APTs-Adversary-Simulation. This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks .

DarkLighthouse. Welcome to the jungle. This is just a simple tool to ease detection of Azure Lighthouse delegations from your current tenant/user/spn access, and to help you add persistence by automating setup of templates on RG/SUB level.

gdrv-loader. Kernel driver loader using vulnerable gigabyte driver (https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities) to load a unsigned driver

CQL-Queries. Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.

DefenderCheck. Identifies the bytes that Microsoft Defender flags on.

CVE-2020-15368. CVE-2020-15368, aka "How to exploit a vulnerable driver"

HostEnumerator. A tool that automates the process of enumeration