markgamache / GPOwn
Do the unexpected with AD GPO processing
☆9Updated 5 years ago
Alternatives and similar repositories for GPOwn:
Users that are interested in GPOwn are comparing it to the libraries listed below
- module for certexfil☆15Updated 2 years ago
- Useful Windows and AD tools☆15Updated 3 years ago
- A PowerShell script to prevent Sysmon from writing its events☆15Updated 4 years ago
- parsers to make life easier☆12Updated 4 years ago
- SSDP Service Discovery☆16Updated 6 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆33Updated 5 years ago
- Burp extension for automated handling of CSRF tokens☆16Updated 6 years ago
- Automated Payload Test Controller☆9Updated 7 years ago
- Apfell implant written in C#.☆8Updated 4 years ago
- C# code to run PIC using CreateThread☆16Updated 5 years ago
- A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…☆17Updated 4 years ago
- A tool to sync mythic events with ghostwriter oplog.☆12Updated 2 months ago
- Forked and updated with some additional features over the original☆16Updated 3 years ago
- Kibana app for RedELK☆16Updated last year
- A tool for checking a hash:pass pot file for hashes from a user:hash file☆12Updated 8 years ago
- Merge results from NMAP and Masscan into one CSV file☆18Updated 6 years ago
- ADD/SUB encoder for alphanumeric shellcode☆9Updated 5 years ago
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆14Updated 7 years ago
- Identify common attack paths to get Domain Administrator☆22Updated 5 years ago
- This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes☆21Updated 3 years ago
- Convert Empire profiles to Apache mod_rewrite scripts☆28Updated 5 years ago
- simple demo of using C# & System.Management.Automation.dll to run powershell code (b64 encoded) without powershell.exe☆14Updated 7 years ago
- Obtains a crackable hash for the current user account☆23Updated 6 years ago
- Modifies machine.config for persistence after installing signed .net assembly onto GAC☆12Updated 2 years ago
- Python crawler for remote Windows shares☆14Updated 9 years ago
- Extracts Azure authentication tokens from PowerShell process minidumps.☆23Updated last year
- Random code snippets☆9Updated last year
- Attacking and defending web and VPN session hijacking in Pulse Secure Connect☆14Updated 5 years ago
- ☆16Updated 6 years ago
- \ PowerAvails Powershell /☆12Updated 6 years ago