This is your work, valued
Security ninja trying to do on the CISO side what red teamers do for years (you know me for dcsync, setntlm, DCShadow & pingcastle)
MakeMeEnterpriseAdmin. PowerShell
268SpoolerScanner. Check if MS-RPRN is remotely available with powershell/c#
181NTLMInjector. In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
171SmbScanner. Smb Scanner from PingCastle
126GidsApplet. Generic Identity Device Specification Applet
118DetectPasswordViaNTLMInFlow. Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords
60ms17-010-Scanner. PowerShell
58TestAntivirus. Test if an antivirus is installed via the resolution of the service virtual SID
55OpenPGP-CSP. A CSP for the OpenPGP card - goal: add write support for certificate enrollment
44Bluekeep-scanner. BlueKeep powershell scanner (based on c# code)
39RPCForSMBLibrary. Extension of SMBLibrary for RPC calls
32OxidBindings. Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
26ADSecrets. Set of ultra technical notes about AD
18openpgpmdrv. OpenPGP smart card minidriver
14awesome-windows-domain-hardening. A curated list of awesome Security Hardening techniques for Windows.
7SubAuth. Sub Authentication package (for the talk you "try" to detect mimikatz)
5Cyrating2TH. Cyrating Reputation alert importer for TheHive, an Open Source and Free Security Incident Response Platform
5PingCastlePatrOwl. An Engine for PatrOwl allowing to run PingCastle scans
4PINSniff. capture smart card pin via a filter driver (demo of you "try" to detect mimikatz)
3mimikatz. A little tool to play with Windows security
2SMBLibrary. Free, Open Source, User-Mode SMB 1.0/CIFS, SMB 2.0 and SMB 2.1 Server Library
2conferences.
1Windows-universal-samples. API samples for the Universal Windows Platform.
1SharpHound. The BloodHound C# Ingestor
1openex. Open Exercises Planning Platform
1WinPmem. The multi-platform memory acquisition tool.
1ExploitIncomingForestTrustBuilder. C++
1vJCRE. Virtual Java Card Runtime Environment
1