c0axx Goto Github PK

cve-2020-1337-poc

poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)

daft

DAFT: Database Audit Framework & Toolkit

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

dnsgrep

Quickly Search Large DNS Datasets

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dumpert

LSASS memory dumper using direct system calls and API unhooking.

eaglemonitorrat

Remote Access Tool Written In C#

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

excel4-dcom

PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)

exploitguard

Documentation and supporting script sample for Windows Exploit Guard

externalc2go

fakelogonscreen

Fake Windows logon screen to steal passwords

foliage

Public variation of FOLIAGE ( original developer )

functionalc2

A small POC of using Azure Functions to relay communications. Feel free to add additional functionality beyond this POC!

ga-recon

Recon(Amass, Naabu, Nuclei) workflow with Github Actions

get-system-techniques

ghost-in-the-logs

Evade sysmon and windows event logging

ghostbuild

GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects

gitleaks

Scan git repos for secrets using regex and entropy 🔑

hackersnote

Hacker's Note - A command-line tool creates gitbook compatible structure for pentest and read team projects documentation.

hexcat

Decode Hashcat '$HEX[]' password output from a password list containing a mixture of non-encoded and encoded passwords

hidefromamsi

Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI

holytips

Tips and Tutorials on Bug Bounty Hunting and Web App Security.

iam-flaws

AWS IAM Security Toolkit: CIS Benchmarks | Enumeration | Privilege Escalation

impacket_static_binaries

Standalone binaries for Linux/Windows of Impacket's examples

jamf-attack-toolkit

Suite of tools to facilitate attacks against the Jamf macOS management platform.

kernel-exploits

Windows kernel driver exploits

kubered