Pinned Repositories
AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
AddJS2PDF
AmsiScanBufferBypass
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
CHM-Exec
CMSTP_UAC_Bypass
commercial
CrackMapExecWindows
MicrosoftWorkflowCompiler
Execute Commands using Microsoft.Workflow.Compiler.exe
analyticsearch's Repositories
analyticsearch/SweetDreams
Implementation of Advanced Module Stomping and Heap/Stack Encryption
analyticsearch/PrivFu
Kernel mode WinDbg extension and PoCs for token privilege investigation.
analyticsearch/youtubecode
Youtube channel sample code
analyticsearch/GIUDA
Ask a TGS on behalf of another user without password
analyticsearch/dploot
DPAPI looting remotely in Python
analyticsearch/IOSSecuritySuite
iOS platform security & anti-tampering Swift library
analyticsearch/PowershellKerberos
Some scripts to abuse kerberos using Powershell
analyticsearch/SharpDXWebcam
Utilizing DirectX and DShowNET assemblies to record video from a host's webcam
analyticsearch/HadesLdr
Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2
analyticsearch/BadZure
BadZure orchestrates the setup of Azure Active Directory tenants, populating them with diverse entities while also introducing common security misconfigurations to create vulnerable tenants with multiple attack paths.
analyticsearch/java-gate
Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders
analyticsearch/PowerExtract
analyticsearch/AtlasReaper
A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.
analyticsearch/RemoteShellcodeExec
Execute shellcode from a remote-hosted bin file using Winhttp.
analyticsearch/GhostFart
analyticsearch/SignatureGate
Weaponized HellsGate/SigFlip
analyticsearch/DavRelayUp
DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).
analyticsearch/Blackout
kill anti-malware protected processes using BYOVD
analyticsearch/HiddenDesktop
HVNC for Cobalt Strike
analyticsearch/postmaniac
Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces
analyticsearch/PPLFault
analyticsearch/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
analyticsearch/PentestGPT
A GPT-empowered penetration testing tool
analyticsearch/Shell3er
PowerShell Reverse Shell
analyticsearch/RunAsPasswd
A RunAs clone with the ability to specify the password as an argument.
analyticsearch/Freeze.rs
Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
analyticsearch/spoofcall
spoof return address
analyticsearch/PKINITtools
Tools for Kerberos PKINIT and relaying to AD CS
analyticsearch/ETWHash
C# POC to extract NetNTLMv1/v2 hashes from ETW provider
analyticsearch/DynamicFinder
A DLL sideloading utility.