bigbael

bigbael's Stars

• marcnewlin/hi_my_name_is_keyboard

  Language:Python623102

• francozappa/bluffs

  Bluetooth Forward and Future Secrecy Attacks and Defenses (BLUFFS) [CVE 2023-24023]

  Language:Python48480

• TakahiroHaruyama/VDR

  Vulnerable driver research tool, result and exploit PoCs

  Language:Python17327

• mrd0x/BITB

  Browser In The Browser (BITB) Templates

  Language:JavaScript2.8k474

• projectdiscovery/uncover

  Quickly discover exposed hosts on the internet using multiple search engines.

  Language:Go2.3k193

• optiv/ScareCrow

  ScareCrow - Payload creation framework designed around EDR bypass.

  Language:Go2.7k503

• RhinoSecurityLabs/IPRotate_Burp_Extension

  Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

  Language:Python803143

• RhinoSecurityLabs/AWS-IAM-Privilege-Escalation

  A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

  888116

• p1ngul1n0/blackbird

  An OSINT tool to search for accounts by username and email in social networks.

  Language:Python2.6k329

• h4wkst3r/InvisibilityCloak

  Proof-of-concept obfuscation toolkit for C# post-exploitation tools

  Language:Python451158

• nccgroup/ScoutSuite

  Multi-Cloud Security Auditing Tool

  Language:Python6.6k1k

• RhinoSecurityLabs/cloudgoat

  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

  Language:Python2.9k595

• RhinoSecurityLabs/pacu

  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

  Language:Python4.3k685

• killswitch-GUI/CobaltStrike-ToolKit

  Some useful scripts for CobaltStrike

  Language:Shell840212

• microsoft/Windows-universal-samples

  API samples for the Universal Windows Platform.

  Language:JavaScript9.5k8k

• mikesiegel/ews-crack

  Language:Python13729

• leoloobeek/COMProxy

  PoC for proxying COM objects when hijacking

  Language:C++19730

• dirkjanm/krbrelayx

  Kerberos unconstrained delegation abuse toolkit

  Language:Python1.1k163

• dirkjanm/mitm6

  pwning IPv4 via IPv6

  Language:Python1.7k242

• eladshamir/Internal-Monologue

  Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

  Language:C#1.4k242

• outflanknl/Dumpert

  LSASS memory dumper using direct system calls and API unhooking.

  Language:C1.5k241

• davidprowe/BadBlood

  BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

  Language:PowerShell2k270

• jthuraisamy/TelemetrySourcerer

  Enumerate and disable common sources of telemetry used by AV/EDR.

  Language:C++751119

• bats3c/Ghost-In-The-Logs

  Evade sysmon and windows event logging

  Language:C611115

• hfiref0x/KDU

  Kernel Driver Utility

  Language:C1.9k415

• CCob/SharpBlock

  A method of bypassing EDR's active projection DLL's by preventing entry point exection

  Language:C#1.1k154

• rasta-mouse/TikiTorch

  Process Injection

  Language:C#750140

• christophetd/spoofing-office-macro

  :fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

  Language:VBA37185

• deepinstinct/LsassSilentProcessExit

  Command line interface to dump LSASS memory to disk via SilentProcessExit

  Language:C++43561

• topotam/PetitPotam

  PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

  Language:C1.8k284