Tylous/SniffAir
A framework for wireless pentesting.
Repositories
Tylous/SourcePoint
SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
Tylous/Freeze.rs
Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
Tylous/Mangle
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
Tylous/Freeze
Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
Tylous/Ivy
Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.
Tylous/ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
Tylous/Talon
A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
Tylous/Limelighter
A tool for generating fake code signing certificates or signing real ones
Tylous/Vibe
A framework for stealthy domain reconnaissance
Tylous/ZipExec
A unique technique to execute binaries from a password protected zip
Tylous/FaceDancer
FaceDancer is an exploitation tool aimed at creating hijackable, proxy-based DLLs by taking advantage of COM-based system DLL image loading
Tylous/GraphRunner
A Post-exploitation Toolset for Interacting with the Microsoft Graph API
Tylous/Dent
A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
Tylous/File-Tunnel
Tunnel TCP connections through a file
Tylous/rustdesk-hvnc
HVNC based on RustDesk
Tylous/Slides
Tylous/File-Smuggling
HTML smuggling is not an evil, it can be useful
Tylous/Auto_EAP
Automated Brute-Force Login Attacks Against EAP Networks.
Tylous/Dockerfiles
My collection of dockerfiles
Tylous/spoolsystem
Print Spooler Named Pipe Impersonation for Cobalt Strike
Tylous/cs-tools
cobalt strike tools
Tylous/EvilnoVNC
Ready to go Phishing Platform
Tylous/PackMyPayload
A PoC that packages payloads into output containersb to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX
Tylous/SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
Tylous/PECheck
A tool to verify and create PE Checksums for Portable Executable (PE) files.
Tylous/build_a_phish
Ansible playbook to deploy a phishing engagement
Tylous/SharpAllTheThings
The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
Tylous/InlineExecute-Assembly
InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module
Tylous/SysWhispers3
SysWhispers on Steroids - AV/EDR evasion via direct system calls.