rmdavy Goto Github PK

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

akamai-bmp-generator

Generate sensor data for Akamai's Bot Management Protocol (BMP) to bypass bot detection.

amsi-tracer

Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) passed into AMSI during dynamic execution.

amsi_ordinal_bypass

Bypass AMSI and Defender using Ordinal Values

amsipebwalkvba

Walking the PEB in VBA

amsipebwalkvbax64

amsiscanner

A C/C++ implementation of Microsoft's Antimalware Scan Interface

artifactkit

assless-chaps

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

azure-study-guides

azureadrecon

AzureADRecon is a tool which gathers information about the Azure Active Directory and generates a report which can provide a holistic picture of the current state of the target environment.

badodf

Creates a malicious ODF document help leak NetNTLM Creds

besotoken

A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

bofs

Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.

byovdkit

bring your own vulnerable driver

cacus

Extract CIS compliance results from .nessus files

caver

certipy

Python implementation for Active Directory certificate abuse

closedports

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

crackmapexec

A swiss army knife for pentesting networks

crackmapexecwin

The great CrackMapExec tool compiled for Windows

crassus

credential-dumping

This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential Access) with examples. There are multiple ways to perform the same tasks

cve-2020-0683

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-0796-lpe-poc

CVE-2020-0796 Local Privilege Escalation POC

cve-2020-0796-poc

CVE-2020-0796 Pre-Auth POC

cve-2021-1675

Impacket implementation of CVE-2021-1675