0xbrainstorm Goto Github PK

air-hammer

auditd

Best Practice Auditd Configuration

change-lockscreen

Offensive tool to trigger network authentications as SYSTEM

change-md5-checksum-macro

check-netconnection

NET Version of Test-NetConnection cmdlet to use on older Windows Versions.

checkpointspray

covenanttasks

Source for tasks I have used with Covenant

cve-2021-36981

decryptocollection

A personal collection of scripts for decrypting various things.

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

detectionlab-elk-kali

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk + Added Kali Machine

efspotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

getsoftwareinventory

gospray

Active Directory Password Spray Testing Utility in Go

harriet

This repo is a resource for various red teaming techniques and tools based on open source software and non-commerical tools.

http-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

invoke-dcom

justevadebro

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

mimikatz

A little tool to play with Windows security

namedpipepth

Pass the Hash to a named pipe for token Impersonation

obfuscator

The program is designed to obfuscate the shellcode.

onedriveupdatersideloading

Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

php_filter_chain_generator

png-idat-payload-generator

Generate a PNG with a payload embedded in the IDAT chunk (Based off of previous concepts and code -- credit in README)

powershell_scripts

processinjection

proxynotshell-poc