mdsecactivebreach

MDSec's ActiveBreach Team

@mdsecresearchRing 0

Pinned Repositories

CACTUSTORCH
CACTUSTORCH: Payload Generation for Adversary Simulations
Language:Visual Basic990 43 4224
Chameleon
Chameleon: A tool for evading Proxy categorisation
Language:Python435 17 771
com_inject
Language:C++176 5 139
DragonCastle
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
Language:C++293 7 035
Farmer
Language:C#335 8 257
LinkedInt
LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation
Language:Python468 25 11112
o365-attack-toolkit
A toolkit to attack Office365
Language:Go1k 57 23213
PowerDNS
PowerDNS: Powershell DNS Delivery
Language:Python213 16 164
RDPInception
A proof of concept for the RDP Inception Attack
Language:Batchfile343 26 1331
SharpShooter
Payload Generation Framework
Language:VBA1.8k 59 27347

mdsecactivebreach's Repositories

mdsecactivebreach/SharpShooter
Payload Generation Framework
Language:VBA1.8k 59 27347
mdsecactivebreach/o365-attack-toolkit
A toolkit to attack Office365
Language:Go1k 57 23213
mdsecactivebreach/CACTUSTORCH
CACTUSTORCH: Payload Generation for Adversary Simulations
Language:Visual Basic990 43 4224
mdsecactivebreach/LinkedInt
LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation
Language:Python468 25 11112
mdsecactivebreach/Chameleon
Chameleon: A tool for evading Proxy categorisation
Language:Python435 17 771
mdsecactivebreach/RDPInception
A proof of concept for the RDP Inception Attack
Language:Batchfile343 26 1331
mdsecactivebreach/Farmer
Language:C#335 8 257
mdsecactivebreach/DragonCastle
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
Language:C++293 7 035
mdsecactivebreach/PowerDNS
PowerDNS: Powershell DNS Delivery
Language:Python213 16 164
mdsecactivebreach/com_inject
Language:C++176 5 139
mdsecactivebreach/ParallelSyscalls
Language:C++159 4 030
mdsecactivebreach/firewalker
Language:C147 10 032
mdsecactivebreach/SharpPack
An Insider Threat Toolkit
Language:Batchfile147 6 034
mdsecactivebreach/sitrep
Language:C#122 12 129
mdsecactivebreach/WMIPersistence
WMI Event Subscription Persistence in C#
Language:C#112 4 029
mdsecactivebreach/Browser-ExternalC2
External C2 Using IE COM Objects
Language:C#96 4 029
mdsecactivebreach/CloneVault
Language:C#67 8 111
mdsecactivebreach/Execute-GithubAssembly-Aggressor
Aggressor Script to Execute Assemblies from Github
65 5 09
mdsecactivebreach/RegistryStrikesBack
Language:C#50 7 011
mdsecactivebreach/lambda-webbugs
A proof of concept for delivering webbugs via AWS lambda
Language:Python43 3 09
mdsecactivebreach/ANGRYPUPPY
Bloodhound Attack Path Automation in CobaltStrike
Language:PowerShell31 2 07
mdsecactivebreach/SharpAltiris
Language:C#245
mdsecactivebreach/CVE-2018-4878
Language:ActionScript23 4 220
mdsecactivebreach/CVE-2023-26258-ArcServe
Language:Python21 4 010
mdsecactivebreach/PleasantTools
Tools for Attacking Pleasant Password Server
Language:C#203
mdsecactivebreach/TakeATest
Language:JavaScript16 4 05
mdsecactivebreach/Invoke-ProcessScan
Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.
Language:PowerShell12 3 03
mdsecactivebreach/morphHTA
morphHTA - Morphing Cobalt Strike's evil.HTA
Language:Python10 3 04
mdsecactivebreach/CVE-2017-8759
CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
8 2 07
mdsecactivebreach/Aggressor-VYSEC
Language:PowerShell52