leftp

Pinned Repositories

BOF-RegSave
Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File
Language:C193 6 032
BackupCreds
A C# implementation of dumping credentials from Windows Credential Manager
Language:C#56 1 010
DPAPISnoop
A C# tool to output crackable DPAPI hashes from user MasterKeys
Language:C#132 3 17
FirewallMoniker
A C# implementation that disables Windows Firewall bypassing UAC
Language:C#10 1 03
RPCsc
Execute a program as a service via RPC
Language:C#10 1 02
SpoolSamplerNET
Implementation of SpoolSample without rDLL
Language:C#28 1 13
VmdkReader
.NET 4.0 Console App to browse VMDK / VHD images and extract files
Language:C#189 6 131
Aladdin
Language:C#219 10 020
ETWHash
C# POC to extract NetNTLMv1/v2 hashes from ETW provider
Language:C#252 6 129

leftp's Repositories

leftp/DPAPISnoop
A C# tool to output crackable DPAPI hashes from user MasterKeys
Language:C#132 3 17
leftp/BackupCreds
A C# implementation of dumping credentials from Windows Credential Manager
Language:C#56 1 010
leftp/FirewallMoniker
A C# implementation that disables Windows Firewall bypassing UAC
Language:C#10 1 03
leftp/qengine
C++ 17 or higher control flow obfuscation library for windows binaries
Language:C++2 0 0
leftp/AtlasReaper
A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.
Language:C#1 0 0
leftp/EDRSandblast-GodFault
EDRSandblast-GodFault
Language:C1 0 0
leftp/AutoFunkt
Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles
Language:Python0 0
leftp/CobaltStrikeReflectiveLoader
Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.
Language:C0 0
leftp/Eclipse
Activation Context Hijack
leftp/EDR-Telemetry
This project aims to compare and evaluate the telemetry of various EDR products.
Language:Python0 0
leftp/evilginx3
sturdy-chainsaw
0 0
leftp/FlavorTown
Various ways to execute shellcode
Language:C#0 0
leftp/hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Language:Rust0 0
leftp/JayFinder
Find DLLs with RWX section
Language:C#0 0
leftp/Kraken
Kraken, a modular multi-language webshell coded by @secu_x11
Language:Python0 0
leftp/MemFiles
A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk
Language:C0 0
leftp/Morphian
Morphian is a python3 tool designed to generate unique passwords by combining specific characteristics of the target. It focuses on providing the user with four wordlists containing possible passwords categorized into different strength levels based on their predictability.
Language:Python0 0
leftp/NachoVPN
A tasty, but malicious SSL-VPN server 🌮
leftp/OperatorsKit
Collection of Beacon Object Files (BOF) for Cobalt Strike
Language:C0 0
leftp/phishlets
0 0
leftp/RToolZ
A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.
Language:C0 0
leftp/SCMKit
Source Code Management Attack Toolkit
Language:C#0 0
leftp/SentinelKQL
Azure Sentinel KQL
0 0
leftp/SharpHound4Cobalt
C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)
Language:C#0 0
leftp/ShellcodePlayer
Versatile tool for configuring launchers for PIC blobs
Language:C0 0
leftp/SQL-BOF
Library of BOFs to interact with SQL servers
Language:C0 0
leftp/TeamsPhisher
Send phishing messages and attachments to Microsoft Teams users
Language:Python0 0
leftp/ThreadlessInject
Threadless Process Injection using remote function hooking.
Language:C#0 0
leftp/WhoxySD
Gather all root domains of an organization from Whoxy
Language:Python0 0
leftp/wsMemShell
WebSocket 内存马/Webshell，一种新型内存马/WebShell技术
Language:Java0 0