rtforks Goto Github PK

aced

akamai-security-research

This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.

bofhound

Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

dllfrommemory-net

C# library to load a native DLL from memory without the need to allow unsafe code

dllloadpath

dolosjs

Red Team "Drop and Run" NAC (802.1x) Bypass

dploot

DPAPI looting remotely in Python

gmsadumper

Lists who can read any gMSA password blobs and parses them if the current user has access.

golang-web-hello-world

hiddendesktop

HVNC for Cobalt Strike

lightsout

Generate an obfuscated DLL that will disable AMSI & ETW

pipeviewer

A tool that shows detailed information about named pipes in Windows

pretender

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

privfu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

pyldapsearch

Tool for issuing manual LDAP queries which offers bofhound compatible output

pythonmemorymodule

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

rpcmon

RPC Monitor tool based on Event Tracing for Windows

runascs

RunasCs - Csharp and open version of windows builtin runas.exe

sharppersistsd

sharpsystemtriggers

Collection of remote authentication triggers in C#

shellcodetemplate

An easily modifiable shellcode template for Windows x64/x86

smbmap

SMBMap is a handy SMB enumeration tool

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

vx-api

Collection of various malicious functionality to aid in malware development

windows-coerced-authentication-methods

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

wmiexec-pro

New generation of wmiexec.py

wtsrm2

ysoserial

ysoserial for su18