bigbael's Stars
marcnewlin/hi_my_name_is_keyboard
francozappa/bluffs
Bluetooth Forward and Future Secrecy Attacks and Defenses (BLUFFS) [CVE 2023-24023]
TakahiroHaruyama/VDR
Vulnerable driver research tool, result and exploit PoCs
mrd0x/BITB
Browser In The Browser (BITB) Templates
projectdiscovery/uncover
Quickly discover exposed hosts on the internet using multiple search engines.
optiv/ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
RhinoSecurityLabs/IPRotate_Burp_Extension
Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
RhinoSecurityLabs/AWS-IAM-Privilege-Escalation
A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
p1ngul1n0/blackbird
An OSINT tool to search for accounts by username and email in social networks.
h4wkst3r/InvisibilityCloak
Proof-of-concept obfuscation toolkit for C# post-exploitation tools
nccgroup/ScoutSuite
Multi-Cloud Security Auditing Tool
RhinoSecurityLabs/cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
RhinoSecurityLabs/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
killswitch-GUI/CobaltStrike-ToolKit
Some useful scripts for CobaltStrike
microsoft/Windows-universal-samples
API samples for the Universal Windows Platform.
mikesiegel/ews-crack
leoloobeek/COMProxy
PoC for proxying COM objects when hijacking
dirkjanm/krbrelayx
Kerberos unconstrained delegation abuse toolkit
dirkjanm/mitm6
pwning IPv4 via IPv6
eladshamir/Internal-Monologue
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
outflanknl/Dumpert
LSASS memory dumper using direct system calls and API unhooking.
davidprowe/BadBlood
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.
jthuraisamy/TelemetrySourcerer
Enumerate and disable common sources of telemetry used by AV/EDR.
bats3c/Ghost-In-The-Logs
Evade sysmon and windows event logging
hfiref0x/KDU
Kernel Driver Utility
CCob/SharpBlock
A method of bypassing EDR's active projection DLL's by preventing entry point exection
rasta-mouse/TikiTorch
Process Injection
christophetd/spoofing-office-macro
:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.
deepinstinct/LsassSilentProcessExit
Command line interface to dump LSASS memory to disk via SilentProcessExit
topotam/PetitPotam
PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.