STMCyber / boobsnail

Related projects: ⓘ

• Mr-Un1k0d3r / ADHuntTool
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆230Updated 2 years ago
• byt3bl33d3r / pyMalleableC2
  Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.
  ☆262Updated 4 months ago
• klezVirus / CandyPotato
  Pure C++, weaponized, fully automated implementation of RottenPotatoNG
  ☆299Updated 3 years ago
• eksperience / KnockOutlook
  A little tool to play with Outlook
  ☆202Updated 2 years ago
• MythicAgents / Medusa
  Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic
  ☆162Updated last year
• ly4k / PrintNightmare
  Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)
  ☆178Updated 2 years ago
• boku7 / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆374Updated last year
• RiccardoAncarani / LiquidSnake
  LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript
  ☆328Updated 3 years ago
• t3hbb / NSGenCS
  Extendable payload obfuscation and delivery framework
  ☆140Updated last year
• ScorpionesLabs / DVS
  D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects
  ☆197Updated 3 years ago
• mdsecactivebreach / Farmer
  ☆341Updated 3 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆256Updated 2 years ago
• S3cur3Th1sSh1t / Invoke-SharpLoader
  ☆345Updated 3 years ago
• hausec / ProxyLogon
  ☆289Updated 2 months ago
• jfmaes / SharpZipRunner
  Executes position independent shellcode from an encrypted zip
  ☆300Updated 3 years ago
• waldo-irc / CVE-2021-21551
  Exploit to SYSTEM for CVE-2021-21551
  ☆236Updated 3 years ago
• cyberark / Evasor
  A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
  ☆309Updated last year
• cube0x0 / SharpeningCobaltStrike
  ☆310Updated this week
• cwolff411 / powerob
  An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.
  ☆141Updated 2 years ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆412Updated 2 years ago
• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆200Updated 3 years ago
• connormcgarr / LittleCorporal
  LittleCorporal: A C# Automated Maldoc Generator
  ☆225Updated 3 years ago
• cube0x0 / CVE-2021-36934
  ☆269Updated this week
• Flangvik / CobaltBus
  Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
  ☆224Updated 2 years ago
• sec-consult / aggrokatz
  Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it …
  ☆156Updated 3 years ago
• Flangvik / DeployPrinterNightmare
  C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!
  ☆180Updated 3 years ago
• o1mate / AppLocker-Bypass
  Bypassing AppLocker with C#
  ☆136Updated 3 years ago
• bohops / WSMan-WinRM
  A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object
  ☆219Updated 4 years ago
• optiv / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆295Updated last year
• securesean / DecryptAutoLogon
  Command line tool to extract/decrypt the password that was stored in the LSA by SysInternals AutoLogon
  ☆210Updated 3 years ago