funnybananas Goto Github PK

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bofs

Collection of Beacon Object Files

cloudinject

cobalt-strike

Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

cs_uploads_tracker

Aggressor script add-in for CobaltStrike to track file uploads

cve-2023-46747-rce

exploit for f5-big-ip RCE cve-2023-46747

cybersecurity-tradecraft

A repo to support the book

defenderyara

Extracted Yara rules from Windows Defender mpavbase and mpasbase

dot-files

Dotfiles repository

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

goad

game of active directory

import-owned-users-bloodhound

script to import owned users in bloodhound

kerbof

Kerboers BOFs - inspired and heavily adapted from nanorobeus and rubeus

namebuster

A tool for username enumeration, using text, files, or websites

nfspy

ID-spoofing NFS client

nimgetwindowclasses

Enumerates windows and returns the title (if any), PID, and Window Class Name.

nimlinewhispers

A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.

nimview

A Nim/Webview based helper to create Desktop/Server applications with Nim/C/C++ and HTML/CSS

objectoverloadingpoc

operational-security-101

A repository of advice and guides to share with friends and family who are concerned about their safety during online activities and the security of their devices.

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

spoolsample

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

vim-config

A repository containing Vim configurations that set up specific development environments.

vundle.vim

Vundle, the plug-in manager for Vim

watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities