tothi

rbcd-attack. Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

dll-hijack-by-proxying. Exploiting DLL Hijacking by DLL Proxying Super Easily

pwn-hisilicon-dvr. Python

ad-honeypot-autodeploy. Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically.

serviceDetector. Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin privileges.

usbgadget-tool. Dumb USB HID gadget creator for Android (for triggering device driver install on Windows for LPE)

stager_libpeconv. A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading

smbmap. SMBMap is a handy SMB enumeration tool - here with Kerberos support

SharpStay. .NET project for installing Persistence

hs-dvr-telnet. open telnet port on modern HiSilicon devices

log4shell-vulnerable-app. A Basic Java Application Vulnerable to the Log4Shell RCE

PowerLessShell. Run PowerShell command without invoking powershell.exe

CVE-2021-1675. C# and Impacket implementation (here with Kerberos auth support) of PrintNightmare CVE-2021-1675/CVE-2021-34527

ctfs. some example ctf writeups

azure-function-proxy. basic proxy as an azure function serverless app

PetitPotam. PetitPotam fork with Kerberos support in the impacket script

linkedin-auth-bypass. browse linkedin profiles without a registered account

kali-rpi-luks-crypt. Full disk encryption for Kali on Raspberry using LUKS

malicious-service. Minimal Windows Service Template for demonstrating privilege escalation via weak service executable permissions

impacket. Impacket is a collection of Python classes for working with network protocols.

smtp2slack4qnap. Compact SMTP to HTTP Gateway (targeting Slack for QNAP-NAS notifications)

NoteThief. Grab unsaved Notepad contents with a Beacon Object File

malicious-hisilicon-scripts. Materials from my older (2018) HiSilicon research

Bundesnachrichtendienst. reversing / malware analysis recruitment challenge for German Federal Intelligence

SharpShot. Trivial .NET desktop capturing for Red Team operations

issuu-dl. download pdf from issuu.com

gcstar-win32. standalone executable built from GCstar Perl release

oauth-mitmproxy. oauth refresh_token client in mitmproxy

steganography. Simple C++ Image Steganography tool to encrypt and hide files insde images using Least-Significant-Bit encoding.

lineageos-bullhead-build. Unofficial LineageOS builds for Google Nexus 5X "bullhead" devices

zphisher. An automated phishing tool with 30+ templates.

remotethermo. remotethermo.com API test

CVE-2020-1472. Test tool for CVE-2020-1472

nmap-http-screenshot. take screenshots of http services from an nmap xml output

azure-function-proxy-ng. Azure Function as a Reverse Proxy (e.g. for C2 ;) )

railfence. a simple python implementation of the Rail Fence cipher (with offset support)

sliver. Adversary Emulation Framework

Powershell-PostExploitation. Scripts created to help with post exploitation of a Windows host

wifipem. automated tool for extracting RADIUS public certificates from pcap files and live captures

burp-Base64PostRequest. Burp Extension: Base64 decode / encode POST request data

prosmart-mqtt. Minimal proSmart - MQTT Gateway

android-keyboard-gadget. Convert your Android device into USB keyboard/mouse, control your PC from your Android device remotely, including BIOS/bootloader.

DeviceGuardBypasses. A repository of some of my Windows 10 Device Guard Bypasses

NetLoader. Loads any C# binary in mem, patching AMSI + ETW.

riemann-nonconvex. Simulation of a totally asymmetric attractive interacting particle system

sencor-bluetooth. Sample development Python scripts for reading data from the Sencor SWS 500 Outdoor Thermo/Humidity Meter Bluetooth LE device.

tensorflow-captcha-solver. 🎲 Solve image based captchas using Tensorflow neural networks

MsgKit. A .NET library to make MSG files without the need for Outlook

adduser. Programmatically create an administrative user under Windows

mvt. MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

home-assistant-core. :house_with_garden: Open source home automation that puts local control and privacy first.

inceptor. Template-Driven AV/EDR Evasion Framework

VulnerableDrivers. Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

KrbRelay. Framework for Kerberos relaying

sudo-cve-2019-18634. Proof of Concept for CVE-2019-18634

rocketchat-history-downloader. Download, export, and preserve Rocket.Chat user-accessible channel logs and history via the Rocket.Chat API. Designed for users who would like to preserve their conversations without having administrative access on a Rocket.Chat server.

openvasreporting. OpenVAS Reporting: Convert OpenVAS XML report files to reports

SharpSecDump. .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

malware-agenttesla. Brief Malware Analysis of an Agent Tesla variant

EDRs. C