charnim Goto Github PK

admodule

Microsoft signed ActiveDirectory PowerShell module

barcode

betterxencrypt

A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.

bucketloot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

cdnstrip

Striping CDN IPs from a list of IP Addresses

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

directinjectorpoc

Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.

dnsrr

DNSrr is a tool written in bash, used to enumerate all the juicy stuff from DNS.

dnsupdate

A python based script to update DNS entries in ADIDNS

enea

Cli tool for quering large amount of hash data from VirusTotal

examplecontainers

Examples of various container types for Python and Golang

exchangequeries

A basic project used to mine API data from an exchange list, runs as a multiprocess for each exchange, writes all data into memory while a main loop is extracring the data into an SQLite DB.

farmer

godaddy-a-record-update

Just a DDNS example in python for linux systems

hardcidr

hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.

havoc-docker

Docker for Havoc C2

havoc2nginx

havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most of the code and the configuration of this project came from the cs2modrewrite project (https://github.com/threatexpress/cs2modrewrite) from Joe Vest and Andrew Chiles. All credits to them.

htmlsmuggling

HTML smuggling is a malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page. The malicious script decodes and deploys the payload on the targeted device when the victim opens/clicks the HTML attachment/link. The HTML smuggling technique leverages legitimate HTML5 and JavaS

insightengineering

invoke-reflectivepeinjection.ps1

Win10 - Updated

ipfuscator

A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representations in Go.

junk

lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

lyncsmash

locate and attack Lync/Skype for Business

msspray

A basic username enumeration and password spraying tool aimed at spraying Microsoft's DOM based authentication using selenium.

mssqlpwner

phpfm

phpFileManager is a complete filesystem management tool on a single file. This is a tool meant for rapid file access, and also to verify the server php configuration and security. The script can be renamed and deployed on an unique known url, and offers password protection.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

protectmytooling

Multi-Packer allowing to daisy-chain over 29 packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.