boh Goto Github PK

powerlurk

Malicious WMI Events using PowerShell

powershell

Some security related PowerShell scripts I developed.

powershell-botnet

A POC powershell botnet

powershell-for-pentesters

PowerShell for Pentesters

powershellforpentesters

Course repository for PowerShell for Pentesters Course

priv2admin

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

processhollowing

Simple Process Hollowing in C#

proxy-attackchain

proxylogon & proxyshell & proxyoracle & proxytoken & all exchange server vulns summarization :)

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

pub

python-virus

Simple polymorphic virus written in Python for the "Malware analysis and Design" Master course in University of Verona

rainloop-webmail

Simple, modern & fast web-based email client

ransomware-builder-v3.0

rdpthief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

red-team-management

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

red_team_telemetry

redbluenotes

Personal notes from Red teamer for Blue/Red/Purple.

redcsharp

Collection of C# projects. Useful for pentesting and redteaming.

redelk

Red Team's SIEM - easy deployable tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

redfile

A flask wsgi application that serves files with intelligence, good for serving conditional RedTeam payloads

redi

Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)

redirect.rules

Quick and dirty dynamic redirect.rules generator

report_malware_public

Reporting malware

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

reverse-engineering-tutorials

Reverse Engineering Tutorials

routeros

RouterOS Bug Hunt Materials Presented at Derbycon 2018

s-500-g2-rat-hvnc-hidden-broswers-hidden-apps-operagx-rat-remote-malware

Clone Profile Hidden Desktop Hidden Browsers Hidden Chrome Hidden Chromodo Hidden SlimJet Hidden Sputnik Hidden Awast Browser Hidden UC Browser Hidden Atom Browser Hidden Opera Neon Hidden Firefox Hidden Edge Hidden Brave Hidden Palemoon Hidden Waterfox Hidden Opera Hidden 360 browser Hidden Comodo Dragon Hidden Internet Explorer Hidden Explorer Hidden Powershell Hidden CMD Hidden Outlook Hidden Thunderbird Hidden Foxmail Hidden Password Recovery HVNC/HVNC browsers HRDP/HRDP browsers/Wallets Reverse Proxy UAC Exploit for Windows 11/10 UAC Exploit for Windows 7 Remote Desktop Remote Cam Remote Microphone Remote Regedit Remote Console Silent Execute File Manager (download,zip,unzip) Disable Windows Defender Execute on connection Tasks Recovery All Chrome based Browsers Recovery for All Firefox based Browsers Recovery & Send Logs To Discord Startup/Schedule task Persistence Miner Watch Dog TaskMgr Dog Spam Tools Hrdp Browers Hrdp Chrome Hrdp Firefox Hrdp Opera Hrdp Brave Hrdp Wallets ArmoryQt Coinomi Atomic Exodus Electrum Jaxx S-500 G2 Builder ! Change Assembly Change Exe Icon Change Exe Name Change Filename File Path Group Clients Mutex Multi Ports Supported Anti Debug System Kill Taskmgr Blue Screen Error Watch Dog Uac Exploit on Execution TaskMgr Dog Export as Shell Code Crypter Merged Run PE Obfuscate

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.