harmj0y Goto Github PK

2016

PowerShell Conference EU 2016 Slides and Demo Scripts

2018

PowerShell Conference Europe 2018 Slides and Demo Scripts

arya

Arya is a simple obfuscator for .NET binaries.

asreproast

Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.

atpminidump

Evading WinDefender ATP credential-theft

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

cheatsheets

Cheat sheets for various projects.

chronology

SpecterOps Historical Records

cortana

This is a pack of Cortana scripts commonly used on our pentests.

cortana-scripts

A collection of Cortana scripts that you may use with Armitage and Cobalt Strike.

damp

The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification

domaintrustexplorer

Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.

dumpert

LSASS memory dumper using direct system calls and API unhooking.

encryptedstore

Offensive Data Storage

exploitremotingservice

A tool to exploit .NET Remoting Services

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

getinjectedthreads

C# Implementation of Jared Atkinson's Get-InjectedThread.ps1

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

impdump

This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.dit databases.

indicatorofcanary

Canary Detection

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

inveigh

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB

invoke-addefense

Defensive-oriented Active Directory enumeration

invoke-altdsbackdoor

invoke-obfuscation

PowerShell Obfuscator

jenkins-27413-workaround-library

Copy of https://bitbucket.org/janvrany/jenkins-27413-workaround-library

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use.

misc-powershell

Misc. PowerShell scripts

misc-powershell-stuff

random powershell goodness