her0ness Goto Github PK

kerberopsec

OPSEC safe Kerberoasting in C#

limelighter

A tool for generating fake code signing certificates or signing real ones

liquidsnake

LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

mind-maps

Mind-Maps of Several Things

moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

msldap

LDAP library for auditing MS AD

nativepayload_cbt

NativePayload_CallBackTechniques C# Codes (Code Execution via Callback Functions Technique, without CreateThread Native API)

needle_sift_bof

Strstr with user-supplied needle and filename as a BOF.

ninja_uuid_dropper

Module Stomping, No New Thread, HellsGate syscaller, UUID Dropper for x64 Windows 10!

nobelium-pdfdlrunaesshellcode

A recreation of the "Nobelium" malware based on Microsofts Malware analysis - Part 1: PDF2Pwn

obfuscate

Guaranteed compile-time string literal obfuscation header-only library for C++14

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

port-forwarding

Tunneling and Port Forwarding Cheat Sheet

portbender

TCP Port Redirection Utility

ppldump

Dump the memory of a PPL with a userland exploit

printnightmare

redteamccode

Red Team C code repo

sauroneye

Search tool to find specific files containing specific words, i.e. files containing passwords..

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

secinject

Section Mapping Process Injection (secinject): Cobalt Strike BOF

sharpdllproxy

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

sharpmove

.NET Project for performing Authenticated Remote Execution

sharpsecdump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

shellcoding

Shellcoding utilities

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spawn

Cobalt Strike Beacon Object File (BOF) that takes the name of of a PE file as an argument and spawns the process in a suspended state

supersneakyexec

Loading and executing shellcode in C# without PInvoke.

systemnightmare

Gives you instant SYSTEM command prompt on all supported and legacy versions of Windows

tiny-aes-c

Small portable AES128/192/256 in C