ipSlav
Red team guy interested in researching, analyzing and detecting adversary tradecrafts and techniques.
Pinned Repositories
adconnectdump
Dump Azure AD Connect credentials for Azure AD and Active Directory
Cooper
A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.
CredMaster
Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
DirtyCLR
An App Domain Manager Injection DLL PoC on steroids
dnsReaper
dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
ExchangeFinder
Find Microsoft Exchange instance for a given domain and identify the exact version
EyeWitnessTheFitness
Exactly what it sounds like, which is something rad
fireprox
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
ipSlav's Repositories
ipSlav/DirtyCLR
An App Domain Manager Injection DLL PoC on steroids
ipSlav/adconnectdump
Dump Azure AD Connect credentials for Azure AD and Active Directory
ipSlav/Cooper
A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.
ipSlav/CredMaster
Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
ipSlav/dnsReaper
dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!
ipSlav/ExchangeFinder
Find Microsoft Exchange instance for a given domain and identify the exact version
ipSlav/EyeWitnessTheFitness
Exactly what it sounds like, which is something rad
ipSlav/fireprox
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
ipSlav/follina.py
Quick POC to replicate the 'Follina' Office RCE vulnerability for local testing purposes
ipSlav/ipSlav
ipSlav/ipslav.github.io
✨ Build a beautiful and simple website in literally minutes. Demo at https://beautifuljekyll.com
ipSlav/Max
Maximizing BloodHound. Max is a good boy.
ipSlav/mergeness
mergeness is a .nessus report file merge tool
ipSlav/pyCobaltHound
pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound.
ipSlav/RecycledGate
Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll
ipSlav/sendgrid-inbound
A Node.js / Express.js app using SendGrid's Inbound Parse to parse email data / attachments
ipSlav/Shelltropy
A technique of hiding malicious shellcode via Shannon encoding.
ipSlav/TeamsPhisher
Send phishing messages and attachments to Microsoft Teams users
ipSlav/TitanLdr
Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.
ipSlav/TREVORproxy
A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!
ipSlav/TREVORspray
TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!