pegasusx Goto Github PK

sharphide

Tool to create hidden registry keys.

sharphose

Asynchronous Password Spraying Tool in C# for Windows Environments

sharpmove

.NET Project for performing Authenticated Remote Execution

sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

sharpshot

sharpstay

.NET project for installing Persistence

silketw

slackor

A Golang implant that uses Slack as a command and control server

slackpirate

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

slides

social_mapper

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

socksoverrdp

Socks5 Proxy support for Remote Desktop Protocol / Terminal Services

spray-ad

A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.

spycheck-linux

Verify whether your Thunderbolt-enabled Linux system is vulnerable to the Thunderspy attacks.

staykit

Cobalt Strike kit for Persistence

stryker

Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303

stuffz

Basically a script thrift shop

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

syscalltables

Windows NT x64 Syscall tables

syscalltest

PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls

systracingpoc

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability

syswhispers

AV/EDR evasion via direct system calls.

tamperetw

PoC to demonstrate how CLR ETW events can be tampered.

threat-intel

Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).

tikitorch

Process Injection

uhoh365

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

usodllloader

Windows - Weaponizing privileged file writes with the Update Session Orchestrator service

vba-runpe

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

vscode-frida

win32k-bugs

Dump of win32k POCs for bugs I've found