This script runs multithreading module that connects to a remote TCP server, monitors active (opened) Microsoft Word documents (.doc,.docx,etc') and extracting their text using Word application's COM Object. The script adds HKCU registry (no admin needed) Run key, so this script runs persistently.
☆32Jul 24, 2020Updated 6 years ago
Alternatives and similar repositories for Invoke-WordThief
Users that are interested in Invoke-WordThief are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evil snippets of Underhanded Red Team tactics☆11Jul 5, 2017Updated 9 years ago
- IronPython scripts for LDAP/ActiveDirectory enumeration☆10Jan 4, 2019Updated 7 years ago
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆13May 20, 2023Updated 3 years ago
- Iterative AD discovery toolkit for offensive operations☆84Mar 16, 2020Updated 6 years ago
- Bash script to take the powerkatz.dll files, encode them using base64 and then replace the old binaries with the new in the Invoke-Mimika…☆16Oct 8, 2016Updated 10 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Dump Lsass Memory Using a Reflective Dll☆14Feb 4, 2022Updated 4 years ago
- A little implant which SSH's back with a shell☆38Feb 1, 2022Updated 4 years ago
- Finding SSL Blindspots for Red Teams☆33Jul 28, 2020Updated 6 years ago
- A demo app vulnerable to directory traversal☆15May 3, 2020Updated 6 years ago
- DeepSea Phishing Gear☆122Jul 20, 2020Updated 6 years ago
- CloudFlare Worker Shell☆14Aug 29, 2020Updated 6 years ago
- Get all possible href | src | url from target url or domain☆40Aug 5, 2020Updated 6 years ago
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- ☆112Aug 5, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Python tool for kidnapping Chrome cookies from a MacOS target☆22Oct 5, 2022Updated 4 years ago
- Create wordlists from source codes files/directories for enumeration☆29Jul 18, 2023Updated 3 years ago
- A cloud automation system for Red Teams based on Terraform and Ansible☆24Apr 21, 2021Updated 5 years ago
- Payload loader with advanced evasion features☆20Nov 1, 2022Updated 4 years ago
- Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows☆143Jul 11, 2020Updated 6 years ago
- Data from analysis of the custom sample from the chapter "Practical Analysis and Test"☆12Aug 1, 2020Updated 6 years ago
- Smuggle a file to a user's browser☆20Apr 16, 2022Updated 4 years ago
- ansible roles to download and install empire (BC-Security),deathstar(byt3bl33der) and starkiller (BC-Security)☆24May 8, 2022Updated 4 years ago
- Automatically spin up infra for phishing☆63Feb 1, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Build a phishing server (Gophish) together with SMTP-redirector (Postfix) automatically in Digital Ocean with terraform and ansible..☆19Jul 7, 2021Updated 5 years ago
- MiniDumpWriteDump behavior modification hook☆50Feb 15, 2021Updated 5 years ago
- Fake SMB and SAMR data☆12Oct 27, 2019Updated 7 years ago
- gorobots - robots.txt recon & path discovery in Go. Structured parsing, 29-category sensitivity classification, concurrent path probing, …☆19Apr 10, 2026Updated 6 months ago
- The Totally Legit Authentication Dialog☆12Sep 5, 2023Updated 3 years ago
- Collaborative web dashboard for RedTeam pentesters☆23Oct 28, 2019Updated 7 years ago
- Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords☆32May 11, 2019Updated 7 years ago
- automatic scan for hackthebox☆13Jan 14, 2020Updated 6 years ago
- Hide cool stuff in images :)☆143Aug 9, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆24May 29, 2020Updated 6 years ago
- Boomerang is a tool to expose multiple internal servers to web/cloud. Agent & Server are pretty stable and can be used in Red Team for Mu…☆226Feb 9, 2021Updated 5 years ago
- Resolve WinAPI func. Custom GetProcAddress and GetModuleHandle written in Nim☆33Jun 2, 2021Updated 5 years ago
- A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies☆325Apr 8, 2023Updated 3 years ago
- A BurpSuite plugin for BBRF☆27Nov 17, 2024Updated last year
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.☆113Dec 26, 2021Updated 4 years ago