Pinned Repositories
amd-ryzen-master-driver-v17-exploit
Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).
ASRenum-BOF
Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
atexec-pro
Fileless atexec, no more need for port 445
Backstab_BOF
Beacon Object File implementation of Yaxser's Backstab
badger-builder
badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles
badgerDAPS
Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Supports OU filtering and removes disabled hosts.
ball
BOFs
Cobalt Strike Beacon Object Files
BOFs-Ricardo
Collection of Beacon Object Files (BOFs) for shells and lols
PoolPartyBof
A beacon object file implementation of PoolParty Process Injection Technique.
endymi's Repositories
endymi/PoolPartyBof
A beacon object file implementation of PoolParty Process Injection Technique.
endymi/atexec-pro
Fileless atexec, no more need for port 445
endymi/ball
endymi/bofhound
Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
endymi/ccmpwn
endymi/deploy-goad
Script to install prerequisites for deploying GOAD on Ubuntu Linux 22.04
endymi/edu
endymi/Efflanrs
Efflanrs - GUI for Snaffler Output
endymi/EventLogCrasher
endymi/eviltree
A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.
endymi/FindMeAccess
endymi/frameless-bitb
A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.
endymi/gpt4all
gpt4all: run open-source LLMs anywhere
endymi/IndicatorOfCanary
Canary Detection
endymi/MetaFinder
Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata
endymi/NativeDump
Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)
endymi/Nemesis-Download-Watcher
Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.
endymi/Parasite-Invoke
Hide your P/Invoke signatures through other people's signed assemblies
endymi/proctools
Small toolkit for extracting information and dumping sensitive strings from Windows processes
endymi/RAGnarok
A Nemesis powered Retrieval-Augmented Generation (RAG) chatbot proof-of-concept.
endymi/RemoteKrbRelay
Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
endymi/SharpConflux
endymi/SharpNado
Repository to gather all .NET malware related code snippets or programs I will develop
endymi/SharpSCCM
A C# utility for interacting with SCCM
endymi/SOAPHound
SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.
endymi/SQL-BOF
Library of BOFs to interact with SQL servers
endymi/SuperSharpShares
SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your associated domain account.
endymi/TrickDump
Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!
endymi/WhoIsWho
Amazing whoami alternatives
endymi/Wifi-Forge
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.