theomilan3 Goto Github PK

pplblade

Protected Process Dumper Tool

ppldump

Dump the memory of a PPL with a userland exploit

practice-ad-cs-domain-escalation

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

pre2k

precompiled-binaries

Collection of useful pre-compiled .NET binaries or other executables for penetration testing Windows Active Directory environments

printnightmare

Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)

printnightmare-cve-2021-34527

PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits

printnightmare-exploit

printnotifypotato

PrintNotifyPotato

printspoofer

privesc

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

privexchange

Exchange your privileges for Domain Admin privs by abusing Exchange

privfu111

Kernel mode WinDbg extension and PoCs for token privilege investigation.

processinjection

This program is designed to demonstrate various process injection techniques

protections-artifacts

Elastic Security detection content for Endpoint

protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

psbypassclm

Bypass for PowerShell Constrained Language Mode

psgetsystem

getsystem via parent process using ps1 & embeded c#

purplecloud

A little tool to play with Azure Identity - Azure Active Directory lab creation tool

pxethief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

pxethiefy

pygpoabuse

Partial python implementation of SharpGPOAbuse

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

random_c2_profile

Cobalt Strike random C2 Profile generator

recycledgate

Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

red-team

Dépot servant de base de connaissance avec des CheatSheet de sécurité offensive, des documentations de Pentest et d'autres choses en rapport avec la sécurité offensive

remotemouse-3.008-exploit

This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.

remotepotato0

Windows Privilege Escalation from User to Domain Admin.

reporting

Export and automate PNG, PDF, and CSV reports in OpenSearch Dashboards

reporting-cli