outflanknl / RedELK-workshopLinks
Items related to the RedELK workshop given at security conferences
☆29Updated last year
Alternatives and similar repositories for RedELK-workshop
Users that are interested in RedELK-workshop are comparing it to the libraries listed below
Sorting:
- Create PDFs with HTML smuggling attachments that save on opening the document.☆30Updated last week
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆38Updated last year
- ☆48Updated 2 years ago
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆26Updated 2 years ago
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆25Updated last year
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆33Updated last year
- Identify binaries with Authenticode digital signatures signed to an internal CA/domain☆40Updated last year
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆33Updated 2 years ago
- Scripts to interact with Microsoft Graph APIs☆42Updated 8 months ago
- ☆26Updated 4 months ago
- ☆19Updated last year
- ☆52Updated last year
- Extension functionality for the NightHawk operator client☆27Updated last year
- .NET port of Leron Gray's azbelt tool.☆26Updated last year
- A simple rpc2socks alternative in pure Go.☆28Updated last year
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆33Updated 2 years ago
- Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+☆32Updated 11 months ago
- PoC MSI payload based on ASEC/AhnLab's blog post☆23Updated 2 years ago
- A lightweight HTTP/HTTPS reverse proxy for efficient, policy-based traffic filtering and redirection.☆45Updated 2 years ago
- Nemesis agent for Mythic☆27Updated 10 months ago
- A collection of tools using OCR to extract potential usernames from RDP screenshots.☆30Updated last year
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆35Updated 2 months ago
- A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80☆20Updated 3 months ago
- ☆15Updated 2 years ago
- WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.☆55Updated 4 years ago
- ☆47Updated 2 years ago
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆39Updated 2 years ago
- A simple to use single-include Windows API resolver☆22Updated last year
- ☆17Updated last year
- Detect userland hooks placed by AV/EDR☆27Updated last year