r13mann Goto Github PK

8021xbridge

Automatically exported from code.google.com/p/8021xbridge

appinitglobalhooks-mimikatz

Hide Mimikatz From Process Lists

applicationwhitelistbypasstechniques

A Catalog of Application Whitelisting Bypass Techniques

arya

Arya is a simple obfuscator for .NET binaries.

bdtunnel

BoutDuTunnel is able to create virtual connections tunnelled in HTTP requests.

carberp

certerator

A tool to generate a custom code signing certificate chain and generate instructions to sign a binary. Useful for establishing persistence on a penetration test.

cfdb

Common Findings Database

cheatsheets

Cheat sheets for various projects.

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

createdesktop

Example application for creating multiple desktops on Windows

danderspritz_docs

The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers

ditto

Binary resource copier

divert

WinDivert: Windows Packet Divert

dnscat2-powershell

A Powershell port of dnscat2, a DNS covert channel tool.

domaintrustexplorer

Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.

dreamboot

UEFI bootkit

dsefix

Windows x64 Driver Signature Enforcement Overrider

dsinternals

DSInternals PowerShell Module and Framework

easy-creds

ebowla

Framework for Making Environmental Keyed Payloads

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

empire

Empire is a pure PowerShell post-exploitation agent.

evilmaid_chkdsk

An bootable 'evil maid' tool that pretends to be Windows CHKDSK

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

gcat

A fully featured backdoor that uses Gmail as a C&C server

hacking-team-windows-kernel-lpe

Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.

hacksysdriverexploits

httpbin

HTTP Request & Response Service, written in Python + Flask.