toneillcodes

windows-process-injection. A collection of techniques for process injection on Windows

DPAPI-BOF. A collection of DPAPI hunting and parsing BOFs

brutalkeepass. Brute force Keepass database passwords

PowerDPAPI. Offensive toolkit and BloodHound graph creator for DPAPI blobs and master key files

DataHound. An advanced data pipeline engine for the BloodHound OpenGraph framework

dpapi-projects. DPAPI research and offensive tools

EntraID-API-Library. A collection of useful API endpoints for security operators and administrators

HoundTrainer. A tool for managing custom node types and Cypher queries in BloodHound

GlobalAMSIBypass. Performs a global AMSI bypass by patching amsi.dll in memory.

bof-development. C

SharpCmdArgs. C# command line argument parsing

CVE-2022-0944. PoC for RCE in SQLPad (CVE-2022-0944)

AlphabetSoup. A Living off the Land recipe for payload obfuscation