Paliak's Stars
FSecureLABS/SharpGPOAbuse
SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
WerWolv/ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
gallickgunner/ImGui-Addons
Cross Platform File Dialog for Dear-ImGui
DrNseven/D3D12-Hook-ImGui
d3d12 hook with imgui, directx12 hook, dx12 hook, d3d12 api hook
Flangvik/NetLoader
Loads any C# binary in mem, patching AMSI + ETW.
GhostPack/SharpUp
SharpUp is a C# port of various PowerUp functionality.
hausec/Bloodhound-Custom-Queries
Custom Query list for the Bloodhound GUI based off my cheatsheet
klezVirus/SilentMoonwalk
PoC Implementation of a fully dynamic call stack spoofer
FuzzySecurity/Sharp-Suite
Also known by Microsoft as Knifecoat :hot_pepper:
TimoSalomaki/awesome-dear-imgui
A collection of awesome dear imgui bindings, extensions and resources
SaadAhla/UnhookingPatch
Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime
CompassSecurity/BloodHoundQueries
3xpl01tc0d3r/ProcessInjection
This program is designed to demonstrate various process injection techniques
NotMedic/NetNTLMtoSilverTicket
SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
aniqfakhrul/powerview.py
Just another Powerview alternative
CCob/SharpBlock
A method of bypassing EDR's active projection DLL's by preventing entry point exection
GhostPack/SafetyKatz
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
leechristensen/SpoolSample
PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
zblurx/dploot
DPAPI looting remotely and locally in Python
ropnop/go-windapsearch
Utility to enumerate users, groups and computers from a Windows domain through LDAP queries
ropnop/windapsearch
Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
Hackndo/pyGPOAbuse
Partial python implementation of SharpGPOAbuse
ZeroMemoryEx/Blackout
kill anti-malware protected processes ( BYOVD) (Microsoft Won )
Flangvik/SharpDllProxy
Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading
jivoi/pentest
:no_entry: offsec batteries included
trustedsec/CS-Remote-OPs-BOF
RedCursorSecurityConsulting/PPLKiller
Tool to bypass LSA Protection (aka Protected Process Light)
dirkjanm/krbrelayx
Kerberos unconstrained delegation abuse toolkit
dirkjanm/adidnsdump
Active Directory Integrated DNS dumping by any authenticated user
rvazarkar/GMSAPasswordReader