mattgrandy Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

aggressorassessor

Aggressor scripts for phases of a pen test or red team assessment

apache-struts2-s2-045-mass-scanner

autonessus

This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan.

cimplant

C# port of WMImplant which uses either CIM or WMI to query remote systems

commando-vm

convert-invoke-kerberoast

Converts the output from Invoke-Kerberoast into hashcat format.

credninja

A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter

csharpscripts

Collection of C# scripts

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27

docpatch

A simple script that edits the XML of a macro-enabled Word document (.docm or Word 97 document) to add a reference to a remote stylesheet.

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

netloader

Loads any C# binary in mem, patching AMSI + ETW.

pentestscripts

Scripts that are useful for me on pen tests

phishing-phramework

Phishing application to aid in sending emails more simply and allowing for more control over settings.

pipal

Pipal, THE password analyser

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

social-engineering-payloads

Collection of social engineering payloads

tmux-initialization

wmipersistence

WMI Event Subscription Persistence in C#

wordlistsmith

A tool to quickly scrape a website and generate a wordlist. Multithreading capable.