sunnyneo Goto Github PK

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobalt_strike_extension_kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.

com-hunter

COM Hijacking VOODOO

conti_202202_leak_procedures

This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.

core-packer

Packers for Desktop agents

cornershot

Amplify network visibility from multiple POV of other hosts

createremotethreadplus

CreateRemoteThread: how to pass multiple parameters to the remote thread function without shellcode.

createtokenexample

credbandit

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

creds

Some usefull Scripts and Executables for Pentest & Forensics

cronos

PoC for a new sleep obfuscation technique leveraging waitable timers to evade memory scanners.

crosslinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

cs-rdll-ipc-example

Example code for using named pipe output with beacon ReflectiveDLLs

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

cs2webconfig

Convert Cobalt Strike profiles to IIS web.config files

csharpreflectionworkshop

The repository that complements the From zero to hero: creating a reflective loader in C# workshop

cssg

Cobalt Strike Shellcode Generator

cthreadhijack

Beacon Object File (BOF) for remote process injection via thread hijacking

cve-2015-7547

Proof of concept for CVE-2015-7547

cve-2021-1675

Impacket implementation of CVE-2021-1675

cve-2021-1675-lpe

Local Privilege Escalation Edition for CVE-2021-1675

cypherhound

Python3 terminal application that contains 260+ Neo4j cyphers for BloodHound data sets

danderspritz_docs

The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers

darkloadlibrary

LoadLibrary for offensive operations

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

dearg-thread-ipc-stealth

A novel technique to communicate between threads using the standard ETHREAD structure

debug_inject

Shellcode injection using debugging APIs

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL