MHaggis / NEBULALinks
Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques
☆40Updated this week
Alternatives and similar repositories for NEBULA
Users that are interested in NEBULA are comparing it to the libraries listed below
Sorting:
- An offensive toolkit for restless guests #DEFCON33☆54Updated 4 months ago
- BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…☆89Updated last month
- AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…☆91Updated 4 months ago
- Baseline a Windows System against LOLBAS☆69Updated last year
- Shows which M365 Objects have Privileged Access and what type (i.e. PIM, Direct, Currently Elevated)☆37Updated 7 months ago
- Ludus range for the Constructing Defense Lab☆69Updated last month
- ☆133Updated 3 months ago
- msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified vi…☆43Updated 9 months ago
- This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)☆66Updated 9 months ago
- POC tool to abuse windows server failover clusters☆49Updated 4 months ago
- Persist like a Dodder☆66Updated 7 months ago
- MSIX Building Made Easy for Defenders☆59Updated 4 months ago
- ☆24Updated 10 months ago
- Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.☆34Updated 11 months ago
- a tiny program to consume from ETW providers for research☆53Updated 11 months ago
- Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.☆43Updated 11 months ago
- ☆34Updated 5 months ago
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆91Updated last year
- Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…☆155Updated 2 months ago
- BypassIT is a framework for covert malware delivery and post-exploitation using AutoIT for red / blue team self assessment.☆47Updated 5 months ago
- ☆47Updated last year
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆61Updated 4 months ago
- An Ansible collection that installs an ADFS deployment with optional configurations.☆43Updated last week
- ☆55Updated last month
- ☆33Updated 3 weeks ago
- ☆53Updated last year
- Fun GUI for Group3rs output log☆37Updated 2 years ago
- Living off the land searches for explorer and sharepoint☆92Updated 3 weeks ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆32Updated 3 months ago
- ☆113Updated 6 months ago