WithSecureLabs / peas
PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
☆173Updated 2 years ago
Alternatives and similar repositories for peas:
Users that are interested in peas are comparing it to the libraries listed below
- ☆73Updated 7 years ago
- Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.☆119Updated 4 years ago
- Parse NTLM challenge messages over HTTP and SMB☆144Updated 2 years ago
- Check if MS-RPRN is remotely available with powershell/c#☆172Updated 6 years ago
- A Powershell implementation of PrivExchange designed to run under the current user's context☆124Updated 6 years ago
- Powershell module to get the NetNTLMv2 hash of the current user☆93Updated 2 years ago
- Domain user enumeration tool☆215Updated last year
- Python script that takes new output from Get-DomainTrustMapping .csvs and outputs graphml. Based on DomainTrustExplorer.☆95Updated last year
- Constrained Language Mode + AMSI bypass all in one☆156Updated 5 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆158Updated 5 years ago
- ☆207Updated 6 years ago
- Various Aggressor Scripts I've Created.☆148Updated 3 years ago
- Malleable C2 profiles for Cobalt Strike☆69Updated 2 years ago
- Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…☆168Updated 4 years ago
- Cobalt Strike Aggressor script menu for Powerview/SharpView☆129Updated 6 years ago
- ntlm relay attack to Exchange Web Services☆330Updated 7 years ago
- An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.☆303Updated 2 years ago
- Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors☆151Updated 6 years ago
- A HTA shell to assist with breakout assessments.☆112Updated 3 years ago
- Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.☆129Updated 9 years ago
- ☆139Updated 5 years ago
- ☆189Updated 4 years ago
- PowerDNS: Powershell DNS Delivery☆212Updated 6 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆106Updated 5 years ago
- The PowerThIEf, an Internet Explorer Post Exploitation library☆131Updated this week
- Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)☆143Updated 7 years ago
- Lateral Movement technique using DCOM and HTA☆231Updated 2 years ago
- A library for integrating communication channels with the Cobalt Strike External C2 server☆283Updated 7 years ago
- An Insider Threat Toolkit☆149Updated 6 years ago
- Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.☆118Updated 5 years ago