inosec2 Goto Github PK

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spartacus

Spartacus DLL Hijacking Discovery Tool

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

split

Apply a divide and conquer approach to bypass EDRs

spoofing-office-macro

:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

sql-injection-cheat-sheet

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan.

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

stfuedr

Silence EDRs by removing kernel callbacks

stopdefender

Stop Windows Defender programmatically

stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sublime-rules

Sublime rules for email attack detection, prevention, and threat hunting.

sw2-secinject

Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF

syscallpack

BOF and Shellcode for full DLL unhooking using dynamic syscalls

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

tamperingsyscalls

tangledwinexec

C# PoCs for investigation of Windows process execution techniques investigation

taowu-cobalt-strike

targetedkerberoast

Kerberoast with ACL abuse capabilities

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

teamsimplant

tekover

Subdomain takeover scanner using Python asyncio

tgtdelegation

tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the-complete-pentesting-privilege-escalation-course

The Complete Pentesting & Privilege Escalation Course, published by Packt

threadlessinject-bof

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.