nettitude / MalSCCM

Related projects ⓘ

Alternatives and complementary repositories for MalSCCM

• xpn / sccmwtf
  ☆143Updated last year
• garrettfoster13 / aced
  ☆151Updated 2 weeks ago
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆119Updated 3 years ago
• Semperis / GoldenGMSA
  GolenGMSA tool for working with GMSA passwords
  ☆136Updated 7 months ago
• Luct0r / KerberOPSEC
  OPSEC safe Kerberoasting in C#
  ☆188Updated 2 years ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆158Updated last year
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆123Updated 8 months ago
• Flangvik / CobaltBus
  Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
  ☆226Updated 2 years ago
• fortalice / modifyCertTemplate
  ADCS cert template modification and ACL enumeration
  ☆129Updated last year
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆250Updated last year
• cube0x0 / LdapSignCheck
  Beacon Object File & C# project to check LDAP signing
  ☆173Updated 3 months ago
• njcve / inflate.py
  Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.
  ☆117Updated 2 years ago
• rootSySdk / PowerGPOAbuse
  Powershell version of SharpGPOAbuse
  ☆70Updated 3 years ago
• powerseb / PowerExtract
  ☆112Updated last year
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆301Updated 8 months ago
• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆203Updated 3 years ago
• mdsecactivebreach / DragonCastle
  A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
  ☆292Updated 2 years ago
• praetorian-inc / ADFSRelay
  Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS
  ☆173Updated 2 years ago
• SecurityRiskAdvisors / msspray
  Password attacks and MFA validation against various endpoints in Azure and Office 365
  ☆149Updated last year
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆274Updated 2 years ago
• whydee86 / SnD_AMSI
  Start new PowerShell without etw and amsi in pure nim
  ☆157Updated 2 years ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆166Updated last year
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆225Updated last year
• coffeegist / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆147Updated 3 weeks ago
• mlcsec / ASRenum-BOF
  Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
  ☆138Updated 8 months ago
• lkarlslund / hashmuncher
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆89Updated last year
• mandiant / ccmpwn
  ☆181Updated 7 months ago
• Flangvik / SharpExfiltrate
  Modular C# framework to exfiltrate loot over secure and trusted channels.
  ☆120Updated 3 years ago
• Malcrove / SeamlessPass
  A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO
  ☆129Updated 2 months ago
• Kevin-Robertson / Sharpmad
  C# version of Powermad
  ☆156Updated 11 months ago