helo86

helo86's Stars

• nickvourd/Supernova

  Real fucking shellcode encryptor & obfuscator tool

  Language:Go699123

• RedSiege/Chromatophore

  Utilities for obfuscating shellcode

  Language:C406

• Orange-Cyberdefense/GOAD

  game of active directory

  Language:PowerShell5.1k714

• StevenBlack/hosts

  🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

  Language:Python26.6k2.2k

• N7WEra/BofAllTheThings

  Creating a repository with all public Beacon Object Files (BoFs)

  41149

• chan2git/elastic-detection-lab

  This repository serves as a comprehensive recap and detailed write-up showcasing the successful completion and in-depth understanding of TCM Security's course: Detection Engineering for Beginners.

  31

• xforcered/BokuLoader

  A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

  Language:C31725

• icyguider/LightsOut

  Generate an obfuscated DLL that will disable AMSI & ETW

  Language:Python31144

• S3cur3Th1sSh1t/Amsi-Bypass-Powershell

  This repo contains some Amsi Bypass methods i found on different Blog Posts.

  1.7k285

• CCob/SharpBlock

  A method of bypassing EDR's active projection DLL's by preventing entry point exection

  Language:C#1.1k155

• VoldeSec/PatchlessCLRLoader

  .NET assembly loader with patchless AMSI and ETW bypass

  Language:C27141

• VoldeSec/PatchlessInlineExecute-Assembly

  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.

  Language:C14421

• anthemtotheego/InlineExecute-Assembly

  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

  Language:C593119

• eladshamir/Whisker

  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

  Language:C#79497

• 0xsp-SRD/MDE_Enum

  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reduction (ASR) rules without Admin privileges

  Language:C#19116

• gh0x0st/Get-ReverseShell

  A solution to create obfuscated reverse shells for PowerShell.

  Language:PowerShell6417

• 0xJs/CARTP-cheatsheet

  Azure AD cheatsheet for the CARTP course

  9449

• MultSec/MultCheck

  Identifies bad bytes from static analysis with any Anti-Virus scanner.

  Language:Go11611

• M507/BlueDucky

  A blue-team tool, creates a list of USB-Rubber-Ducky instructions.

  Language:Python365

• pentestfunctions/BlueDucky

  🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

  Language:Python1.2k201

• Hubbl3/ThreatCheck

  Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

  Language:C#112

• SikretaLabs/BlueMap

  A Azure Exploitation Toolkit for Red Team & Pentesters

  Language:Python14725

• bettercap/bettercap

  The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

  Language:JavaScript16.5k1.5k

• GoSecure/pywsus

  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

  Language:Python28844

• GoSecure/WSuspicious

  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations

  Language:C#34348

• varwara/CVE-2024-21338

  PoC for the Untrusted Pointer Dereference in the appid.sys driver

  Language:C63

• abankalarm/ReHacks

  This repo will house materials for ReHacks.live

  Language:C++41

• lab52io/LeakedHandlesFinder

  Leaked Windows processes handles identification tool

  Language:C++27242

• apmorton/teensy-template

  Teensy 3.X Project Template

  Language:C17472

• lefayjey/linWinPwn

  linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

  Language:Shell1.8k263