roobixx / EventLogForRedTeamsLinks
Simple PoC from Malicious Payload Injection from Windows Event Log Entry
☆28Updated 3 years ago
Alternatives and similar repositories for EventLogForRedTeams
Users that are interested in EventLogForRedTeams are comparing it to the libraries listed below
Sorting:
- A module for CME that spiders across a domain.☆35Updated 3 years ago
- Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later☆93Updated 2 years ago
- Federated Office365 user enumeration based on correlated response trend analysis☆52Updated 3 years ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆42Updated 7 months ago
- A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools☆88Updated 2 years ago
- ☆86Updated 2 years ago
- ☆43Updated 3 years ago
- Retrieve AD accounts description and search for password in it☆82Updated 3 years ago
- Updated version of PowerDNS by @domchell. Adds support for transfers over DNS A records and a few other useful features.☆83Updated 2 years ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆56Updated 3 years ago
- Get Fine Grained Password Policy☆76Updated 6 months ago
- BloodCheck enables Red and Blue Teams to manage multiple Neo4j databases and run Cypher queries against a BloodHound dataset.☆17Updated 4 years ago
- My BloodHound custom queries☆26Updated 2 years ago
- Some scripts to support with importing large datasets into BloodHound☆81Updated last year
- C# version of NTLMRawUnHide☆72Updated 3 years ago
- ☆44Updated last year
- OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.☆91Updated 3 years ago
- ☆36Updated 2 years ago
- RDP Checker☆64Updated last year
- ☆39Updated 3 years ago
- An Ansible role for installing Cobalt Strike.☆81Updated 3 weeks ago
- Common library used by SharpHound.☆96Updated this week
- Abuse Azure API permissions for red teaming☆68Updated 2 years ago
- PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10…☆35Updated 3 years ago
- Golang search engine scraper intended for identification of published ClickOnce deployments☆88Updated 11 months ago
- Living Off the Foreign Land setup scripts☆72Updated 8 months ago
- Investigation about ACL abusing for Active Directory Certificate Services (AD CS)☆130Updated 4 years ago
- Default Detections for EDR☆96Updated last year
- Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.☆98Updated last year
- Slide decks and/or materials from conference presentations☆56Updated 2 years ago