py7hagoras Goto Github PK

aggressor-scripts

Aggregation of Cobalt Strike's aggressor scripts.

appsectraining

AppSec Training

blacktech

BlackTech class for Security

c_shot

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

covenanttasks

Source for tasks I have used with Covenant

csharp

Various C# projects for offensive security

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27

dvwa

Damn Vulnerable Web Application (DVWA)

exploits

getsystem

This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process.

injection

Windows process injection methods

krsvc

nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

officemacro64

This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.fr/building-an-office-macro-to-spoof-process-parent-and-command-line/

pentest-scripts

Some scripts encountered while pentesting

plaintext

poc

Proof of Concepts

ppid-spoofing

Scripts for performing and detecting parent PID spoofing

psemp

C Sharp implementation of PowerShell Empire stage 1 (HTTPS) - Original work by Julio Ureña

retisransomwaredecryptor

This is a tool for decrypting files encrypted by the Retis ransomware ".crypted"

rubeus

Trying to tame the three-headed dog.

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

sharp-suite

My musings with C#

sharp-wmiexec

sharpspray

SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.

sharptools

Public tools already compiled in C#

sharpweb

.NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.

spoofing-office-macro

:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

vba-runpe

A VBA implementation of the RunPE technique or how to bypass application whitelisting.