outflanknl / Presentations
Presentation material presented by Outflank team members at public events.
☆181Updated last week
Related projects ⓘ
Alternatives and complementary repositories for Presentations
- lateral movement techniques that can be used during red team exercises☆265Updated 4 years ago
- ☆161Updated last year
- Lateral Movement technique using DCOM and HTA☆229Updated 2 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆244Updated 4 years ago
- Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…☆167Updated 4 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆105Updated 5 years ago
- Neutering Sysmon via driver unload☆222Updated 2 years ago
- Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors☆147Updated 5 years ago
- Evading WinDefender ATP credential-theft☆253Updated 4 years ago
- Recon-AD, an AD recon tool based on ADSI and reflective DLL’s☆316Updated 5 years ago
- SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp☆134Updated 3 years ago
- StandIn is a small .NET35/45 AD post-exploitation toolkit☆253Updated 2 years ago
- A curated list of awesome BloodhoundAD resources☆227Updated 2 years ago
- Tools for discovery and abuse of COM hijacks☆291Updated 5 years ago
- Python script that takes new output from Get-DomainTrustMapping .csvs and outputs graphml. Based on DomainTrustExplorer.☆90Updated 11 months ago
- 64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.☆127Updated last year
- A C# implementation of PrivExchange by @_dirkjan.☆156Updated 5 years ago
- Scripts for performing and detecting parent PID spoofing☆139Updated 4 years ago
- Run Rubeus via Rundll32☆198Updated 4 years ago
- Powershell module to get the NetNTLMv2 hash of the current user☆92Updated 2 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆213Updated 4 years ago
- ☆78Updated 7 years ago
- ☆237Updated 6 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆254Updated 5 years ago
- Macro-Enabled Excel File Generator (.xlsm) using the EPPlus Library.☆143Updated 4 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆253Updated 6 years ago
- A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4M…☆87Updated 5 years ago
- A Powershell implementation of PrivExchange designed to run under the current user's context☆123Updated 5 years ago
- An Insider Threat Toolkit☆149Updated 5 years ago
- A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object☆225Updated 4 years ago