Dec0ne

Pinned Repositories

AMS-BP
AMSI Bypass for powershell
Language:PowerShell30 2 08
DavRelayUp
DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).
Language:C#510 4 577
Dec0ne.github.io
:sparkles: Build a beautiful and simple website in literally minutes. Demo at http://deanattali.com/beautiful-jekyll
Language:HTML4 0 02
DllNotificationInjection
A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.
Language:C++430 2 274
evilgophish
evilginx2 + gophish
Language:Go5 0 01
HWSyscalls
HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.
Language:C++614 5 294
KrbRelayUp
KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
Language:C#1.5k 23 23202
PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
Language:PowerShell23 0 02
Recon-ng-Modules
Recon-ng modules for basic OSINT.
Language:Python9 1 13
ShadowSpray
A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.
Language:C#448 5 179

Dec0ne's Repositories

Dec0ne/KrbRelayUp
KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
Language:C#1.5k 23 23202
Dec0ne/HWSyscalls
HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.
Language:C++614 5 294
Dec0ne/DavRelayUp
DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).
Language:C#510 4 577
Dec0ne/ShadowSpray
A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.
Language:C#448 5 179
Dec0ne/DllNotificationInjection
A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.
Language:C++430 2 274
Dec0ne/AMS-BP
AMSI Bypass for powershell
Language:PowerShell30 2 08
Dec0ne/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
Language:PowerShell23 0 02
Dec0ne/Recon-ng-Modules
Recon-ng modules for basic OSINT.
Language:Python9 1 13
Dec0ne/evilgophish
evilginx2 + gophish
Language:Go5 0 01
Dec0ne/Dec0ne.github.io
:sparkles: Build a beautiful and simple website in literally minutes. Demo at http://deanattali.com/beautiful-jekyll
Language:HTML4 0 02
Dec0ne/MSOLSpray
A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.
Language:PowerShell0 0 01