reverserdp_rce

rmd160-sort

RIPEMD160 hash binary file sorting.

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

roadtools

The Azure AD exploration framework.

roguepotato

Another Windows Local Privilege Escalation from Service Account to System

rpcfirewall

rtlo-attack

Right-To-Left Override POC

rubeus

Trying to tame the three-headed dog.

rubeus-rundll32

Run Rubeus via Rundll32

rubeus2ccache

Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.

runascs

RunasCs - Csharp and open version of windows builtin runas.exe

ruralbishop

D/Invoke port of UrbanBishop

rvrsh3ll

things

rvrsh3ll.github.io

sapito

A mDNS sniffer and interpreter.

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scarecrow-cobaltstrike

Cobalt Strike script for ScareCrow payloads

sccmhunter

sccmwtf

scomdecrypt

SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers

scout

A .NET assembly for performing recon against hosts on a network

scripts

Small scripts that make life better

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

searchoutlook

A C# tool to search through a running instance of Outlook for keywords

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

self_deletion_bof

BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs

serveruntrustaccount

A technique for Active Directory domain persistence

sessiongopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.

sharp-smbexec

SMBExec C# module

sharp-suite

My musings with C#