markgamache / GPOwn
Do the unexpected with AD GPO processing
☆9Updated 5 years ago
Alternatives and similar repositories for GPOwn:
Users that are interested in GPOwn are comparing it to the libraries listed below
- module for certexfil☆15Updated 2 years ago
- A PowerShell script to prevent Sysmon from writing its events☆15Updated 4 years ago
- SSDP Service Discovery☆16Updated 6 years ago
- parsers to make life easier☆12Updated 4 years ago
- Identify common attack paths to get Domain Administrator☆22Updated 5 years ago
- Automated Payload Test Controller☆9Updated 7 years ago
- Random code snippets☆9Updated last year
- Useful Windows and AD tools☆15Updated 3 years ago
- Apfell implant written in C#.☆8Updated 4 years ago
- Merge results from NMAP and Masscan into one CSV file☆18Updated 6 years ago
- Attacking and defending web and VPN session hijacking in Pulse Secure Connect☆14Updated 5 years ago
- Python crawler for remote Windows shares☆12Updated 9 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆33Updated 5 years ago
- A tool to sync mythic events with ghostwriter oplog.☆12Updated 3 months ago
- Work in Progress repo☆14Updated 5 years ago
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆14Updated 7 years ago
- C# code to run PIC using CreateThread☆16Updated 5 years ago
- Repository of Information sharing on threats and indicators☆12Updated 4 years ago
- LetMeOutOfYour.net Resources☆20Updated 4 years ago
- A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…☆17Updated 4 years ago
- Burp extension for automated handling of CSRF tokens☆16Updated 7 years ago
- This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes☆21Updated 4 years ago
- Apply a filter to the events being reported by windows event logging☆15Updated 4 years ago
- A Canary which fires when uninstalled☆34Updated 3 years ago
- ☆16Updated 6 years ago
- Forked and updated with some additional features over the original☆16Updated 3 years ago
- simple demo of using C# & System.Management.Automation.dll to run powershell code (b64 encoded) without powershell.exe☆14Updated 7 years ago
- ADD/SUB encoder for alphanumeric shellcode☆9Updated 5 years ago
- Kibana app for RedELK☆16Updated last year
- ☆14Updated 4 years ago