fyoder

fyoder's Stars

• Microwave89/createuserprocess

  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess

  Language:C8422

• am0nsec/vx

  Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.

  Language:Assembly17735

• jjyg/metasm

  This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby

  Language:Ruby46383

• jthuraisamy/SysWhispers

  AV/EDR evasion via direct system calls.

  Language:Assembly1.8k264

• xan7r/Misc

  Language:PowerShell4512

• homjxi0e/ReaCOM

  ReaCOM has got a lot of tools to use and is related to component object model

  7317

• d35ha/CallObfuscator

  Obfuscate specific windows apis with different apis

  Language:C++978175

• cobbr/SharpSploit

  SharpSploit is a .NET post-exploitation library written in C#

  Language:C#1.7k305

• infosecn1nja/MaliciousMacroMSBuild

  Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.

  Language:Python492118

• infosecn1nja/AD-Attack-Defense

  Attack and defend active directory using modern post exploitation adversary tradecraft activity

  4.4k1k

• bitsadmin/wesng

  Windows Exploit Suggester - Next Generation

  Language:Python4.2k561

• FuzzySecurity/Sharp-Suite

  Also known by Microsoft as Knifecoat :hot_pepper:

  Language:C#1.1k204

• cobbr/Covenant

  Covenant is a collaborative .NET C2 framework for red teamers.

  Language:C#4.2k767

• icebearfriend/deckbuilder

  Cobalt Strike cna script for randomized argument spoofing

  5212

• bitsadmin/nopowershell

  PowerShell rebuilt in C# for Red Teaming purposes

  Language:C#963135

• FSecureLABS/SharpGPOAbuse

  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

  Language:C#1k136

• HarmJ0y/TrustVisualizer

  Python script that takes new output from Get-DomainTrustMapping .csvs and outputs graphml. Based on DomainTrustExplorer.

  Language:Python8817

• pkb1s/SharpAllowedToAct

  Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)

  Language:C#18337

• Und3rf10w/Aggressor-scripts

  Aggressor scripts I've made for Cobalt Strike

  Language:PowerShell40394