fancysauced Goto Github PK

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

donpapi

Dumping DPAPI credz remotely

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

duplicut

Dedupe massive wordlists quickly, without changing order :scissors:

edrsandblast

evil-winrm

The ultimate WinRM shell for hacking/pentesting

eyeballer

Convolutional neural network for analyzing pentest screenshots

fancy-hashcat-stuff

Custom NTLM Hashcat Mask File

ffuf

Fast web fuzzer written in Go

findobjects-bof

A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or process handles.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

fresh.py

An efficient multi-threaded DNS resolver validator

g0t-b0r3d

A bunch of code and scripts I wrote because I was bored.

get-lapspasswords

Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

ghostwriter

The SpecterOps project management and reporting engine

gnmap-parser

Bash script to parse multiple Nmap (.gnmap) exports into various plain-text formats for easy analysis.

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

hvnc

Standalone HVNC Client & Server | Coded in C++ (Modified Tinynuke)

impacket

Impacket is a collection of Python classes for working with network protocols.

inject-assembly

Execute .NET in an Existing Process

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

inlinewhispers2

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

installerfiletakeover

itwasalladream

A PrintNightmare (CVE-2021-3457) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

jenkins-attack-framework

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

lsassy

Extract credentials from lsass remotely