analyticsearch Goto Github PK

.net-profiler-dll-hijack

Implementation of the .NET Profiler DLL hijack in C#

.netconfigloader

.net config loader

3snake

Tool for extracting information from newly spawned processes

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adape-script

Active Directory Assessment and Privilege Escalation Script

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

adcscoercepotato

adcsync

Use ESC1 to perform a makeshift DCSync and dump hashes

addjs2pdf

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

admodule

Microsoft's ActiveDirectory PowerShell module

adokit

Azure DevOps Services Attack Toolkit

adpassword

AD Password -> NTLM, AES128, AES256

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

aggressor-vysec

aggressorassessor

Aggressor scripts for phases of a pen test or red team assessment

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

am0n-eye

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi-provider

A fake AMSI Provider which can be used for persistence.

amsi_handler

amsi_ordinal_bypass

Bypass AMSI and Defender using Ordinal Values

amsi_rubeus_bypass

amsipebwalkvbax64

amsiscanbuffer-bypass

amsiscanbufferbypass

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

antivirus-artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

apc-research

APC Internals Research Code