analyticsearch Goto Github PK

hellsgateppid

Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process

hershell

Multiplatform reverse shell generator

hiddendesktop

HVNC for Cobalt Strike

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

hw-call-stack

Use hardware breakpoints to spoof the call stack for both syscalls and API calls

hwacha

Deploy payloads to *Nix systems en masse

hwsyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

iatelligence

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix related

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

icmpsh

Simple reverse ICMP shell

ifaultrepelevateddatacollectionuac

iis-raid

A native backdoor module for Microsoft IIS (Internet Information Services)

impacket

Impacket is a collection of Python classes for working with network protocols.

impersonate

A windows token impersonation tool

imsi-catcher

This program show you IMSI numbers of cellphones around you.

inception

Provides In-memory compilation and reflective loading of C# apps for AV evasion.

infosec_reference

An Information Security Reference That Doesn't Suck

inject-assembly

Inject .NET assemblies into an existing process

injectallthethings

Seven different DLL injection techniques in one single project.

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

insightengineering

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

interprocesscommunication-samples

Some Code Samples for Windows based Inter-Process-Communication (IPC)

inveigh

Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

inveighzero

Windows C# LLMNR/mDNS/NBNS/DNS spoofer/man-in-the-middle tool

invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

invisiblepersistence

Persisting in the Windows registry "invisibly"

invoke-commandas

Invoke Command as System/User on Local/Remote computer using ScheduleTask.

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator