xpn / sccmwtf

Related projects: ⓘ

• garrettfoster13 / aced
  ☆144Updated 7 months ago
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆250Updated last year
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆118Updated 2 years ago
• nettitude / MalSCCM
  ☆241Updated 11 months ago
• Luct0r / KerberOPSEC
  OPSEC safe Kerberoasting in C#
  ☆187Updated 2 years ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆152Updated last year
• fortalice / modifyCertTemplate
  ADCS cert template modification and ACL enumeration
  ☆126Updated last year
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆293Updated 6 months ago
• xforcered / InlineExecute-Assembly
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆182Updated 3 years ago
• Semperis / GoldenGMSA
  GolenGMSA tool for working with GMSA passwords
  ☆133Updated 5 months ago
• bitsadmin / chophound
  Some scripts to support with importing large datasets into BloodHound
  ☆75Updated 9 months ago
• connormcgarr / tgtdelegation
  tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"
  ☆153Updated 2 years ago
• Cobalt-Strike / ElevateKit
  The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
  ☆102Updated 4 years ago
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆117Updated 6 months ago
• cube0x0 / LdapSignCheck
  Beacon Object File & C# project to check LDAP signing
  ☆161Updated last month
• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆200Updated 3 years ago
• wavvs / nanorobeus
  COFF file (BOF) for managing Kerberos tickets.
  ☆276Updated last year
• CCob / DGPOEdit
  Disconnected GPO Editor - A Group Policy Manager launcher to allow editing of domain GPOs from non-domain joined machines
  ☆55Updated 2 weeks ago
• mandiant / ccmpwn
  ☆174Updated 5 months ago
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆218Updated last year
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆164Updated last year
• SecuraBV / Timeroast
  Timeroasting scripts by Tom Tervoort
  ☆176Updated last year
• RoxanaKovaci / Azure-pipelines
  ☆0Updated 5 months ago
• powerseb / PowerExtract
  ☆110Updated last year
• Flangvik / CobaltBus
  Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
  ☆224Updated 2 years ago
• njcve / inflate.py
  Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.
  ☆116Updated 2 years ago
• mlcsec / ASRenum-BOF
  Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
  ☆136Updated 6 months ago
• rvrsh3ll / Azure-App-Tools
  Collection of tools to use with Azure Applications
  ☆107Updated 11 months ago
• SecurityRiskAdvisors / msspray
  Password attacks and MFA validation against various endpoints in Azure and Office 365
  ☆148Updated last year