ndur0 Goto Github PK

aggressor-scripts

Aggregation of Cobalt Strike's aggressor scripts.

bofs

Cobalt Strike BOF projects

darkarmour

Windows AV Evasion

evasor

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

ghost-in-the-logs

Evade sysmon and windows event logging

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

homedirectory

Leverage existing 'GenericAll' AD rights over an object ie: user to set their profile to an attacker smb server ie: ntlmrelayx to dump hashes, relay, crack.

inlinewhispers

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)

lightsout

PE Header, ETW, AMSI Evasion .net library (dll) utilizing SharpSploits' DInvoke to build / add to payloads

linkedin_profiles

scrapes Linkedin for company employee profiles

lookforschemes

netloader

Loads any C# binary in mem, patching AMSI and bypassing Windows Defender

offensivecsharp

Collection of Offensive C# Tooling

offensivedlr

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

pezor

Read the blog post here: https://iwantmore.pizza/posts/PEzor.html

powerlessshell

Run PowerShell command without invoking powershell.exe

remoteprocessinjection

C# remote process injection utility for Cobalt Strike

ruralbishop

D/Invoke port of UrbanBishop

scheduleme

The ScheduleMe project is part of establishing persistence via the WptsExtensions.dll DLL hijack.

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

sgn

Shikata ga nai (仕方がない) encoder ported into go with several improvements

sharp-suite

My musings with C#

sharpblock

A method of bypassing EDR's active projection DLL's by preventing entry point exection

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpgen

SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

sharpusodllloader

sniper

A simple proof of concept for detecting use of Cobalt Strike's execute-assembly

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient