shellcoding

Shellcoding utilities

shellshocker-pocs

Collection of Proof of Concepts and Potential Targets for #ShellShocker

shhgit

Ah shhgit! Find GitHub secrets in real time

shr3dkit

Red Team Tool Kit

shredhound

Small utility to chunk up a large BloodHound JSON file into smaller files for importing.

silenthound

Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.

silketw

skidzex

A modded version of ConfuserEx | SkiDzEx

slayer

Slayer

sliver

Adversary Emulation Framework

smbghost-smbleed-scanner

SMBGhost (CVE-2020-0796) and SMBleed (CVE-2020-1206) Scanner

smbghost_rce_poc

smbmap

SMBMap is a handy SMB enumeration tool

sms-phishing-attacker

sneaky_gophish

Hiding GoPhish from the boys in blue

so_appid

Install Snort OpenAppID in Security Onion IDS

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spacerunner

This tool enables the compilation of a C# program that will execute arbitrary PowerShell code, without launching PowerShell processes through the use of runspace.

sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

spartan

Frontpage and Sharepoint fingerprinting and attack tool.

sparty-2.0

An MS Sharepoint and Frontpage Auditing Tool

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

splunkwhisperer2

Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations

spoofing-office-macro

:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

spoolerscanner

Check if MS-RPRN is remotely available with powershell/c#

spoolfool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

spoolsample

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN protocol. This is possible via other protocols as well.

spoolsystem

Print Spooler Named Pipe Impersonation for Cobalt Strike

spring-rce-poc

sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.