cynicxer Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adpeas

Powershell tool to automate Active Directory enumeration.

ai-notes

notes for my AI studies, writing, and product brainstorming

aircross

An attack tool capable of executing single-factor authentication attacks against the AirWatch MDM solution suite

amon-eye

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

bhp-ch7

blackhat python

bof_collection

Various Cobalt Strike BOFs

cobaltbus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

coercedpotato

csharpscripts

Collection of C# scripts

deepsleep

all credits go to @mgeeky

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fud-uuid-shellcode

hashcat-rule

Rule for hashcat or john. Aiming to crack how people generate their password

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

hwsyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

iat_unhook_sample

(First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls and all hooked functions (incl. hooked NtProtectVirtualMemory)

iori_loader

UUID shellcode Loader with dynamic indirect syscall implementation, syscall number/instruction get resolved dynamicaly at runtime, and the syscall number/instruction get unhooked using Halosgate technique. Function address get resolved from the PEB by offsets and comparaison by hashes

java-stager

A PoC Java Stager which can download, compile, and execute a Java file in memory.

ldapnomnom

Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)

mousejack

MouseJack device discovery and research tools

msbuildapicaller

MSBuild Without MSBuild.exe

nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

nsgencs

Extendable payload obfuscation and delivery framework

obfuscator