w1repirate Goto Github PK

accomplice

Tools for discovery and abuse of COM hijacks

apd_launchpad

Script for generating hostapd-wpe configuration files and spoofed certificates

arjun

HTTP parameter discovery suite.

azure-pentest-tools

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

azure-red-team

Azure Security Resources and Notes

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

cheesetools

Self-developed tools for Lateral Movement/Code Execution

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cobalt-clip

Cobaltstrike addons to interact with clipboard

cobaltbus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

cobaltstrike-aggressor-scripts

A collection of Cobalt Strike Aggressor scripts.

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

cold-boot-attacks

Cold Boot Attack Tools for Linux

cookie-graber-bof

C or BOF file to extract WebKit master key to decrypt user cookie

creds

Some usefull Scripts and Executables for Pentest & Forensics

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

cursedchrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

cve-2023-23397-poc-powershell

darkloadlibrary

LoadLibrary for offensive operations

dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

dfscoerce

dllsideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

edrsandblast

elevatedevents

etwhash

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

evilginx2-ttps

Reverse engineered to remove IOCs, added Exchange Online Protection IP blacklist and bing-bot user-agent blocking, DNS configuration and notes on usage.

evilgophish

evilginx2 + gophish

evtx-to-mitre-attack

Set of EVTX samples (>270) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.