Lefteris Panos

VmdkReader. .NET 4.0 Console App to browse VMDK / VHD images and extract files

DPAPISnoop. A C# tool to output crackable DPAPI hashes from user MasterKeys

RegPersist. a BOF implementation of various registry persistence methods

BackupCreds. A C# implementation of dumping credentials from Windows Credential Manager

SharpPXE. A C# tool for extracting information from SCCM PXE boot media.

WimReader. C# to read WIM files over the network without transferring the whole file

SpoolSamplerNET. Implementation of SpoolSample without rDLL

pipes. A x64 Position Independent Proxy Enumerator Shellcode (PIPES)

FirewallMoniker. A C# implementation that disables Windows Firewall bypassing UAC

RPCsc. Execute a program as a service via RPC

EtwSessionHijacking. A Poc on blocking Procmon from monitoring network events

qengine. C++ 17 or higher control flow obfuscation library for windows binaries

Appify-UI. Create the simplest possible Mac OS X apps. Uses HTML5 for the UI. Supports scripting with anything and everything

HiddenEye. Modern Phishing Tool With Advanced Functionality And Multiple Tunnelling Services [ Android-Support-Available ]

ARCInject. Overwrite a process's recovery callback and invoke a crash to execute

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

EDRSandblast-GodFault. EDRSandblast-GodFault

AssemblyLine. A C library and binary for generating machine code of x86_64 assembly language and executing on the fly without invoking another compiler, assembler or linker.

CARTP-cheatsheet. Azure AD cheatsheet for the CARTP course

FALCONSTRIKE. A stealthy, targeted Windows Loader for delivering second-stage payloads(shellcode) to the host machine undetected

netsh_acl_enumerator. C# replacement of "netsh http show urlacl"

BetterXencrypt. A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.

AQUARMOURY. My musings in C and offensive tooling

AtlasReaper. A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.

.NET-Obfuscator. Lists of .NET Obfuscator (Free, Trial, Paid and Open Source )

SuspendThreads. C++

WSMan-WinRM. A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object