khr0x40sh

MacroShop. Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

WhiteListEvasion. Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.

Galvatron. Powershell fork of Monohard by Carlos Ganoza P. This botnet/backdoor was designed to egress over unecrypted web using very little, but effective obfuscation. Egress over ICMP and DNS are planned as features. Lastly, the server code is designed to setup the C2 on a LAMP-esque server. The default creds are admin/admin.

metasploit-modules. Ruby

PowerW0rm. PowerShell

PowerSurfer. A powershell based traffic generation scripts to simulate user activity via Internet Explorer

ms16-032. C

ms16_032_DLL. DLL of MS16-032 Exploit

malwareanalysis. snippets related to malware analysis

Mockingjay. Tests and implementation of Mockingjay technique

SharpMockingJay. C# / .NET implementation of the local DLL Injection use case of the MockingJay EDR Bypass technique

LNKfun. A simple LNK file parser/editor written in PS1.

SharpeningCobaltStrike. in realtime v35/40 dotnet compiler for your linux Cobalt Strike C2. New fresh compiled and obfuscated binary for each use

OSCP-2. Collection of things made during my OSCP journey

talks. Files From Talks

win-brute-logon. Crack any Microsoft Windows users password without any privilege (Guest account included)

CVE-2024-4956. CVE-2024-4956 Python exploitation utility

Minimalistic-offensive-security-tools. A repository of tools for pentesting of restricted and isolated environments.

embedps. C#

Cobalt-Strike-Aggressor-Scripts. Cobalt Strike Aggressor 插件包

DueDLLigence. C#

Sandboxescaperclone. Reuploading the code she removed.

AmsiScanBufferBypass. C#

SharpRDP. Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

sharpratworm. Automatically exported from code.google.com/p/sharpratworm

Egress-Assess. Egress-Assess is a tool used to test egress data detection capabilities

Aggressor-scripts. Aggressor scripts I've made for Cobalt Strike

MS17-010. MS17-010

CVE-2018-4878. ActionScript

Salsa-tools. Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched

kismetearth-net. Automatically exported from code.google.com/p/kismetearth-net

EvilNetConnectionWMIProvider. C#

DefenderCheck. Identifies the bytes that Microsoft Defender flags on.

SharpSploit. SharpSploit is a .NET post-exploitation library written in C#

NetLoader. Loads any C# binary in mem, patching AMSI and bypassing Windows Defender

DumpsterFire. "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.