Duane Michael

Misconfiguration-Manager. Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

whoamsi. An effort to track security vendors' use of Microsoft's Antimalware Scan Interface

Journey_to_OSCE. A curated collection of resources that may be beneficial for anyone pursuing the OSCE.

OSCE-Prep. A list of freely available resources that can be used as a prerequisite before taking OSCE.

ElevateKit. The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

ShellcodeWrapper. Shellcode wrapper with encryption for multiple target languages

windows-itpro-docs. This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

win32. Public mirror for win32-pr

osed-scripts. bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

scripts. Python

shellcode-runners. Various shellcode runners

msf_rc_scripts.

docker-bloodhound. BloodHound Docker Ready to Use

.github. Python

chronology. SpecterOps Historical Records

minidump. Simple C# program to call MiniDumpWriteDump to dump LSASS memory.

PetitPotam. PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

MSSQL_Scripts. Various scripts/tools for enumerating and abusing MSSQL.

Whisker. Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

bypasses. C#

win_api. Learning the arcane arts of the Windows API.

Advanced-Process-Injection-Workshop. C++

PEzor. Open-Source PE Packer

LdapRelayScan. Check for LDAP protections regarding the relay of NTLM authentication

SharpDPAPI. SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

dnSpy. .NET debugger and assembly editor

Apollo. A .NET Framework 4.0 Windows Agent

personal_site. JavaScript

WinDbg-Samples. Sample extensions, scripts, and API uses for WinDbg.

printspoofer.net. C#

Seatbelt. Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

rdpthief_dllinjection. C#

SCShell. SCShell implementation from scratch done as part of the PEN-300 course.