S3cur3Th1sSh1t

WinPwn. Automation for internal Windows Penetrationtest / AD-Security

Pentest-Tools.

Amsi-Bypass-Powershell. This repo contains some Amsi Bypass methods i found on different Blog Posts.

PowerSharpPack. PowerShell

OffensiveVBA. This repo covers some code execution and AV Evasion methods for Macros in Office documents

Creds. Some usefull Scripts and Executables for Pentest & Forensics

MultiPotato. C++

Caro-Kann. Encrypted shellcode Injection to avoid Kernel triggered memory scans

SharpImpersonation. A User Impersonation tool - via Token or Shellcode injection

Invoke-SharpLoader. PowerShell

Ruy-Lopez. C

SharpNamedPipePTH. Pass the Hash to a named pipe for token Impersonation

Nim-RunPE. A Nim implementation of reflective PE-Loading from memory

NimGetSyscallStub. Get fresh Syscalls from a fresh ntdll.dll copy

SharpVeeamDecryptor. Decrypt Veeam database passwords

NamedPipePTH. Pass the Hash to a named pipe for token Impersonation

SyscallAmsiScanBufferBypass. AmsiScanBufferBypass using D/Invoke

Excel-Phish. Phish password protected Excel-Files

Nim_DInvoke. D/Invoke implementation in Nim

Sharp-HackBrowserData. C# binary with embeded golang hack-browser-data

Get-System-Techniques. PowerShell

RDPThiefInject. RDPThief donut shellcode inject into mstsc

NimShellcodeFluctuation. ShellcodeFluctuation PoC ported to Nim

My-starred-Repositories. This is my starred repositories including the description for each tool. Makes search/filter over them easier.

Nim_CBT_Shellcode. CallBack-Techniques for Shellcode execution ported to Nim

Invoke-Sharpcradle. Load C# Code straight to memory

SharpOxidResolver. IOXIDResolver from AirBus Security/PingCastle

BitwardenDecryptBrute. Wordlist attacks on Bitwarden data.json files

LDAP-Signing-Scanner. A little scanner to check the LDAP Signing state

SharpPolarBear. Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069

S3cur3Th1sSh1t.

SharpByeBear. AppXSVC Service race condition - privilege escalation

SharpUnhooker. C# Based Universal API Unhooker - Automatically Unhook API Hives (ntdll.dll,kernel32.dll,user32.dll,and kernelbase.dll)

nim-strenc. string encryption in Nim

MailSniper. MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

xencrypt. A PowerShell script anti-virus evasion tool

SharpLigolo. C# wrapper for ligolo

TeamViewerDecrypt. PowerShell

OffensiveNim. My experiments in weaponizing Nim (https://nim-lang.org/)

Grouper. A PowerShell script for helping to find vulnerable settings in AD Group Policy.

the-book-of-secret-knowledge. A collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.

DomainPasswordSpray. DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

EmpEISDecrypt. Decrypt Matrix42 Empirum /EIS Passwords

Invoke-WMI-Information. Straight forward script for WMI information gathering (local or remote)

AMSITrigger. The Hunt for Malicious Strings

SharpRDP. Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

PrivescCheck. Privilege Escalation Enumeration Script for Windows

WinFor. Powershell script to execute different forensic Powershell functions / tools on a compromised host

AD-Attack-Defense. Active Directory Security For Red & Blue Team

CheckPlease. Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

p0wnedShell. PowerShell Runspace Post Exploitation Toolkit

Shellcode-Hide. This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

awesome-windows-domain-hardening. A curated list of awesome Security Hardening techniques for Windows.

mitmAP. 📡 A python program to create a fake AP and sniff data.

metasploit-framework. Metasploit Framework