Hubbl3 / ThreatCheckLinks
Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
☆12Updated last year
Alternatives and similar repositories for ThreatCheck
Users that are interested in ThreatCheck are comparing it to the libraries listed below
Sorting:
- Scripts to interact with Microsoft Graph APIs☆44Updated last year
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52Updated last year
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆29Updated 2 years ago
- Mythic C2 wrapper for NimSyscallPacker☆25Updated 10 months ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆33Updated last year
- ☆29Updated 2 years ago
- in-process powershell runner for BRC4☆48Updated 2 years ago
- A lightweight HTTP/HTTPS reverse proxy for efficient, policy-based traffic filtering and redirection.☆45Updated 2 years ago
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆58Updated 3 years ago
- SMB Audit Tool you were looking for☆24Updated 2 years ago
- ☆49Updated 2 years ago
- .NET port of Leron Gray's azbelt tool.☆26Updated 2 years ago
- Find Inbound Email Domains☆35Updated 2 years ago
- Minimal Windows Service Template for demonstrating privilege escalation via weak service executable permissions☆14Updated 3 years ago
- Extract registry and NTDS secrets from local or remote disk images☆45Updated 10 months ago
- A vSphere deployment of GOADv2 BETA Testing (v0.1)☆26Updated 2 years ago
- ☆19Updated last year
- Items related to the RedELK workshop given at security conferences☆29Updated 2 years ago
- Docker container for running CobaltStrike 4.7 and above☆24Updated 10 months ago
- Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+☆35Updated last month
- ☆61Updated 2 years ago
- ☆44Updated last year
- Reverse-HTTP Redirector via DigitalOcean Apps Platform☆30Updated 2 years ago
- An improvement and a different approach to Mockingjay Self-Injection.☆35Updated last year
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆39Updated 2 years ago
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆38Updated last month
- Modified version of Impacket to use dynamic NTLMv2 Challenge/Response☆20Updated 3 years ago
- Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …☆24Updated 2 years ago
- Validates priv escalation of AD trusts☆48Updated 9 months ago
- Discord C2 Profile for Mythic☆33Updated 11 months ago