inosec2 Goto Github PK

sublime-rules

Sublime rules for email attack detection, prevention, and threat hunting.

supernova

Real fucking shellcode encryption tool.

sw2-secinject

Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF

syscallpack

BOF and Shellcode for full DLL unhooking using dynamic syscalls

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

takemyrdp

A keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.exe and CredentialUIBroker.exe)

tamperingsyscalls

tangledwinexec

C# PoCs for investigation of Windows process execution techniques investigation

taowu-cobalt-strike

targetedkerberoast

Kerberoast with ACL abuse capabilities

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

teamsimplant

tekover

Subdomain takeover scanner using Python asyncio

tgtdelegation

tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the-complete-pentesting-privilege-escalation-course

The Complete Pentesting & Privilege Escalation Course, published by Packt

threadlessinject-bof

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

thundershell

Python / C# Unmanaged PowerShell based RAT

titan

Titan: A generic user defined reflective DLL for Cobalt Strike

titanldr

Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH

tokenplayer

Manipulating and Abusing Windows Access Tokens.

tokenuniverse

An advanced tool for working with access tokens and Windows security policy.

tor-router

A tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.

torkill

trigen

Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.

tuktuk

Tool for catching and logging different types of requests.

tunna

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.