th3k3ymak3r Goto Github PK

365inspect

A PowerShell script that automates the security assessment of Microsoft Office 365 environments.

abusing_weak_acl_on_certificate_templates

Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

adalanche

Active Directory ACL Visualizer - who's really Domain Admin?

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

azure-red-team

Azure Security Resources and Notes

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

bof-injectamsibypass

Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.

bofallthethings

Creating a repository with all public Beacon Object Files (BoFs)

certify

Active Directory certificate abuse.

certipy

Python implementation for Active Directory certificate abuse

certstealer

A .NET tool for exporting and importing certificates without touching disk.

chisel

A fast TCP/UDP tunnel over HTTP

cobalt-strike

Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection

cobaltnotion

A spin-off research project. Cobalt Strike x Notion collab 2022

com-hunter

COM Hijacking VOODOO

cs-bofs

Collection of CobaltStrike beacon object files

cs-remote-ops-bof

cve-2021-33909

Sequoia exploit (7/20/21)

cve-2021-36934

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

cve-2021-38647

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

cve-2021-40444-sample

CVE-2021-40444 Sample

damp

The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification

dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

deployprinternightmare

C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!

dnsstager

Hide your payload in DNS

donpapi

Dumping DPAPI credz remotely

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW

edrs

efspotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻