blackarrowsec Goto Github PK

advisories

Advisories and Proofs of Concept by BlackArrow

certify

Active Directory certificate abuse.

certipy

Tool for Active Directory Certificate Services enumeration and abuse

eap_buster

EAP_buster is a simple bash script that lists what EAP methods are supported by the RADIUS server behind a WPA-Enterprise access point

efspotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

fozar

Fozar allows you to traverse commits across multiple repositories matching against user supplied regex

handly

Abuse leaked token handles.

impacket

Impacket is a collection of Python classes for working with network protocols.

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

malware-research

Malware campaigns and APTs research by BlackArrow

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

ntlm_challenger

Parse NTLM challenge messages over HTTP and SMB

pachine

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

pivotnacci

A tool to make socks connections through HTTP agents

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

tactical-hunting

wap

Wappalyzer python library

wappy

Discover web technologies in web applications from your terminal