fancysauced Goto Github PK

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

lsassy

Extract credentials from lsass remotely

mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

minbeacon

A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.

misc-powershell-scripts

Random Tools

multipotato

nanodump

Dumping LSASS has never been so stealthy

net-creds

Sniffs sensitive data from interface or pcap

net-obfuscate

Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

netloader

Loads any C# binary in mem, patching AMSI and bypassing Windows Defender

netntlmtosilverticket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

nimexamples

A collection of offensive Nim example code

nimpackt-v1

Nim-based assembly packer and shellcode loader for opsec & profit

ninja_uuid_dropper

Module Stomping, No New Thread, HellsGate syscaller, UUID Dropper for x64 Windows 10!

nmap-scan-to-csv

Converts Nmap XML output to csv file, and other useful functions

noctilucent

Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

ntlm_challenger

Parse NTLM challenge messages over HTTP and SMB

ntlmv1-multi

NTLMv1 Multitool

offensivecsharp

Collection of Offensive C# Tooling

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

offensivepipeline

OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.

packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

passthecert

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

pentesting-scripts

A ton of helpful tools

petitpotam

phantom-dll-hollower-poc

Phantom DLL hollowing PoC

pimpmykali

Kali Linux Fixes for Newly Imported VM's