BANANAMAGIC

BANANAMAGIC's Stars

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61.6k1.8k014.7k

• fortra/impacket

  Impacket is a collection of Python classes for working with network protocols.

  Language:Python13.6k3759633.6k

• hasherezade/pe-sieve

  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

  Language:C++3.1k10292434

• swisskyrepo/SSRFmap

  Automatic SSRF fuzzer and exploitation tool

  Language:Python3k5524529

• MegaManSec/SSH-Snake

  SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

  Language:Shell2k2414188

• Mazars-Tech/AD_Miner

  AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

  Language:JavaScript1.2k1837116

• swisskyrepo/InternalAllTheThings

  Active Directory and Internal Pentest Cheatsheets

  Language:HTML1.1k120204

• honze-net/nmap-bootstrap-xsl

  A Nmap XSL implementation with Bootstrap.

  Language:HTML925308176

• TrimarcJake/Locksmith

  A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

  Language:PowerShell887154489

• Wh04m1001/DFSCoerce

  Language:Python7389494

• xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

  Microsoft-Outlook-Remote-Code-Execution-Vulnerability

  Language:Python704101153

• assume-breach/Home-Grown-Red-Team

  Language:Python6731516109

• vdjagilev/nmap-formatter

  A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter.

  Language:Go65577755

• quietvoid/dovi_tool

  dovi_tool is a CLI tool combining multiple utilities for working with Dolby Vision.

  Language:Rust6453414759

• Sh3lldon/FullBypass

  A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

  Language:C#64142113

• reveng007/DarkWidow

  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

  Language:C56712177

• stacksmashing/pico-tpmsniffer

  A simple, very experimental TPM sniffer for LPC bus

  Language:C53925278

• swisskyrepo/HardwareAllTheThings

  Hardware/IOT Pentesting Wiki

  Language:HTML514140112

• swisskyrepo/SharpLAPS

  Retrieve LAPS password from LDAP

  Language:C#38510078

• waelmas/frameless-bitb

  A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

  Language:CSS35461544

• WithSecureLabs/lolcerts

  A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

  Language:YARA33011127

• Kudaes/Shelter

  ROP-based sleep obfuscation to evade memory scanners

  Language:Rust3215032

• mtth-bfft/adeleg

  Active Directory delegation management tool

  Language:Rust28571132

• senzee1984/InflativeLoading

  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

  Language:Python2666360

• Hackndo/WebclientServiceScanner

  Python tool to Check running WebClient services on multiple targets based on @leechristensen

  Language:Python2525025

• florylsk/ExecIT

  Execute shellcode files with rundll32

  Language:C++1843121

• hackerhouse-opensource/Artillery

  CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administrator.

  Language:C1745029

• rasta-mouse/CsWhispers

  Source generator to add D/Invoke and indirect syscall methods to a C# project.

  Language:C#1703016

• Hackcraft-Labs/Fairplay

  Artifact monitoring that ensures fairplay

  Language:Python66147

• decoder-it/DFSCoerce-exe-2

  DFSCoerce exe revisited version with custom authentication

  Language:C35108