Yeeb1

Cortex-XDR-Config-Extractor

Cortex XDR Config Extractor

BlazorRazor

Tools Suite to Dump Microsoft .NET Blazor Applications and Run some (basic) Analysis

DeathTrooperDecryption

DeathTrooperDecryption is a toolset for decrypting and analyzing encrypted communications in the Empire C2 framework. It's intended to decode staging data, command outputs, session keys, and cookies from captured Empire agent traffic.

EvenWorseGuest

Fork of nyxgeek's bad_guest.ps1 which outputs into JSON.

ProxmoxAuthForge

A Python script designed for generating authentication tokens for Proxmox VE (Virtual Environment). The script automates the process of creating 'PVEAuthCookie' and 'PMGAuthCookie', with the private key typically found at /etc/pve/priv/authkey.key for PVE and /etc/pmg/pmg-authkey.key for PMG

SharpLansweeperDecrypt

Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.

SharpRDPlusSnatcher

Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials used in remote desktop sessions.

shelf

The Shelf is a repository containing various tools, exploits, and scripts that I’ve gathered over the years. These are small but useful utilities for hacking, automation, and configurations that didn't justify their own repo but are too handy to lose. Useful for quick tasks, testing, or competitive hacking.

SquidSideOut

Internal Port Scanner for Squid Proxy

Yeeb1/SharpLansweeperDecrypt

Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.

Yeeb1/shelf

The Shelf is a repository containing various tools, exploits, and scripts that I’ve gathered over the years. These are small but useful utilities for hacking, automation, and configurations that didn't justify their own repo but are too handy to lose. Useful for quick tasks, testing, or competitive hacking.

Yeeb1/SharpRDPlusSnatcher

Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials used in remote desktop sessions.

Yeeb1/BlazorRazor

Tools Suite to Dump Microsoft .NET Blazor Applications and Run some (basic) Analysis

Yeeb1/ProxmoxAuthForge

A Python script designed for generating authentication tokens for Proxmox VE (Virtual Environment). The script automates the process of creating 'PVEAuthCookie' and 'PMGAuthCookie', with the private key typically found at /etc/pve/priv/authkey.key for PVE and /etc/pmg/pmg-authkey.key for PMG

Yeeb1/SquidSideOut

Internal Port Scanner for Squid Proxy

Yeeb1/EvenWorseGuest

Fork of nyxgeek's bad_guest.ps1 which outputs into JSON.

Yeeb1/HTB-Discord

Collection of hacked-together scripts to integrate some HTB goodness into your Discord server.

Yeeb1/ASP.NETIdentity2hashcat

Converts ASP.NET Identity (PBKDF2+HMAC-SHA1 and PBKDF2+HMAC-SHA256) to Hashcat format

Yeeb1/CVE-2023-27532-RCE-Only

Modified Exploit for CVE-2023-27532 against Veeam Backup & Replication

Yeeb1/WinSSHTermVaultRecovery

A tool for cracking WinSSHTerm vault master passwords, with a wordlist.

Yeeb1/DeathTrooperDecryption

DeathTrooperDecryption is a toolset for decrypting and analyzing encrypted communications in the Empire C2 framework. It's intended to decode staging data, command outputs, session keys, and cookies from captured Empire agent traffic.

Yeeb1/dotfiles

Yeeb1/filezilla2hashcat

This script converts FileZilla hashes into a format compatible with Hashcat (PBKDF2-HMAC-SHA256) for cracking. Additionally, it can parse users.xml or server.xml files to extract hashes, salts, and iterations automatically.

Yeeb1/NetExec

The Network Execution Tool

Yeeb1/NimPlanted

A Python script to recover the AES key and decrypt agent traffic from the NimPlant C2 server by exploiting the limited keyspace of the XOR key used in pre-crypto operations.

Yeeb1/DavineLuLinvega

Python tools for quickly sharing command outputs, files, and clipboard content to Discord.

Yeeb1/KeeFarceRebornRT

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

Yeeb1/Yeeb1