v4nyl Goto Github PK

servicemove-bof

New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.

sessiongopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.

shad0w

A post exploitation framework designed to operate covertly on heavily monitored enviroments

shapeshifter

Companion PoC for the "Adventures in Dynamic Evasion" blog post

sharp-suite

My musings with C#

sharpallthethings

The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.

sharpapplocker

C# port of the Get-AppLockerPolicy PS cmdlet

sharpblock

A method of bypassing EDR's active projection DLL's by preventing entry point exection

sharpbypassuac

C# tool for UAC bypasses

sharpcghunter

Receive the status of Windows Defender Credential Guard on network hosts.

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpcrasheventlog

C# port of LogServiceCrash

sharpdllproxy

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

sharpdoor

SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.

sharpedrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

sharpeningcobaltstrike

in realtime v35/40 dotnet compiler for your linux Cobalt Strike C2. New fresh compiled and obfuscated binary for each use

sharpermission

C# .NET Assembly for interacting with File Object DACLs

sharpexfiltrate

Modular C# framework to exfiltrate loot over secure and trusted channels.

sharphide

Tool to create hidden registry keys.

sharpimpersonation

A User Impersonation tool - via Token or Shellcode injection

sharpkatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

sharpldapwhoami

WhoAmI by asking the LDAP service on a domain controller.

sharpmad

C# version of Powermad

sharpmapexec

sharpmemshell

Memshell

sharpnopsexec

Get file less command execution for lateral movement.

sharpoxidresolver

IOXIDResolver from AirBus Security/PingCastle

sharpproxylogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

sharprdphijack

A POC Remote Desktop (RDP) session hijack utility for disconnected sessions

sharprelay