curtishoughton Goto Github PK

injector

Complete Arsenal of Memory injection and other techniques for red-teaming in Windows

installerfiletakeover

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

invoke-dllclone

Koppeling x Metatwin x LazySign

invoke-sharploader

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11

itwasalladream

A PrintNightmare (CVE-2021-3457) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

jamf-attack-toolkit

Suite of tools to facilitate attacks against the Jamf macOS management platform.

jenkins-attack-framework

jira-mobile-ssrf-exploit

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

kage

Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kernel-mii

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

kernelbypasssharp

C# Kernel Mode Driver to read and write memory in protected processes

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

krbrelayx

Kerberos unconstrained delegation abuse toolkit

l3mon

L3MON - Remote Android Managment Suite

lazysign

Create fake certs for binaries using windows binaries and the power of bat files

linux_lpe_ebpf_cve-2021-3490

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Exploitation steps.

littlecorporal

LittleCorporal: A C# Automated Maldoc Generator

lockdexedemo

A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lsasssilentprocessexit

Command line interface to dump LSASS memory to disk via SilentProcessExit

lsassy

Extract credentials from lsass remotely

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

maldev-for-dummies

A workshop about Malware Development