Pinned Repositories
AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
AddJS2PDF
AmsiScanBufferBypass
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
CHM-Exec
CMSTP_UAC_Bypass
commercial
CrackMapExecWindows
MicrosoftWorkflowCompiler
Execute Commands using Microsoft.Workflow.Compiler.exe
analyticsearch's Repositories
analyticsearch/OffensiveCloud
Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)
analyticsearch/misc
miscellaneous scripts and programs
analyticsearch/orpheus
Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types
analyticsearch/Amsi-Bypass-Powershell
This repo contains some Amsi Bypass methods i found on different Blog Posts.
analyticsearch/laZzzy
laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.
analyticsearch/AlternativeShellcodeExec
Alternative Shellcode Execution Via Callbacks
analyticsearch/Spartacus
Spartacus DLL Hijacking Discovery Tool
analyticsearch/TokenMan
analyticsearch/ExecRemoteAssembly
Execute Remote Assembly with args passing and with AMSI and ETW patching
analyticsearch/pre2k
analyticsearch/NGLite
A major platform RAT Tool based by Blockchain/P2P.Now support Windows/Linux/MacOS
analyticsearch/hoaxshell
An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.
analyticsearch/WAMBam
Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post
analyticsearch/AtomPePacker
A Highly capable Pe Packer
analyticsearch/IFaultrepElevatedDataCollectionUAC
analyticsearch/ShadowSpray
A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.
analyticsearch/Shhhloader
Syscall Shellcode Loader (Work in Progress)
analyticsearch/NimShellcodeFluctuation
ShellcodeFluctuation PoC ported to Nim
analyticsearch/SharpNTLMRawUnHide
C# version of NTLMRawUnHide
analyticsearch/asminject
Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes without the use of ptrace by accessing /proc/<pid>/mem. Useful for certain post-exploitation scenarios, recovering content from process memory, etc..
analyticsearch/MinHook.NET
A C# port of the MinHook API hooking library
analyticsearch/FilelessRemotePE
Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
analyticsearch/Freeze
Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
analyticsearch/updog
Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.
analyticsearch/reinschauer
analyticsearch/TokenTacticsV2
A fork of the great TokenTactics with support for CAE and token endpoint v2
analyticsearch/SCMKit
Source Code Management Attack Toolkit
analyticsearch/TamperingSyscalls
analyticsearch/CustomXMLPart
A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.
analyticsearch/VolatileDataCollector