jeffchan69 Goto Github PK

scarecrow-cobaltstrike

Cobalt Strike script for ScareCrow payloads (EDR/AV evasion)

sharpallthethings

The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.

sharpcompile

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing using beacon's 'execute-assembly' in seconds.

sharplaps

Retrieve LAPS password from LDAP

sharpmad

C# version of Powermad

sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

sharpspray

SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.

sharpspray-1

Active Directory password spraying tool. Auto fetches user list and avoids potential lockouts.

shellcodeloader

shellcodeloader

shhhloader

Syscall Shellcode Loader (Work in Progress)

sideloadingdll

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

silketw

singlefile

🖭 Web Extension for Firefox/Chrome/MS Edge and CLI tool to save a faithful copy of an entire web page in a single HTML file

sliver

Adversary Emulation Framework

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

spoolfool

Exploit for CVE-2022–22718 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

spoolsample

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

stopdefender

Stop Windows Defender programmatically

supersharpshooter

Payload Generation Framework

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

syscallshuffler

Your NTDLL vaccine from modern direct syscall methods.

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

the-terror-osint

twist.moe

Batch download high quality videos from https://twist.moe

uac-bypass

Simple way to bypass windows User Account Control