sepo79 Goto Github PK

dotnettojscript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

enableparentprivileges

enablesebackupprivilege

encryptedkeyexchange

eternal_blue_powershell

Port of eternal blue exploits to powershell

ewstoolkit

Abusing Exchange via EWS

examplechatapplication

A simple example chat application written for .NET Core to learn network protocol analysis.

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

filewriter

.NET project for writing files to local or remote hosts

foliage

Experiment on reproducing Obfuscate & Sleep

forgecert

"Golden" certificates

fork-n-run

funwithserverless

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

gg-aesy

Hide cool stuff in images :)

goshellcode

hellsgate

Original C Implementation of the Hell's Gate VX Technique

ilmerge

ILMerge is a static linker for .NET Assemblies.

imaginaryc2

Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IPs. Additionally, the tool aims to make it easy to replay captured Command-and-Control responses/served payloads.

impacket

Impacket is a collection of Python classes for working with network protocols.

inceptor

Template-Driven AV/EDR Evasion Framework

invoke-dllclone

Koppeling x Metatwin x LazySign

invoke-sharploader

invoke-tcpportscan

Perform a full TCP connection scan to the destination hostname, or to 'open.zorinaq.com' if that destination is not supplied.

keethief

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

kekeo

A little toolbox to play with Microsoft Kerberos in C

king-phisher

Phishing Campaign Toolkit

koppeling

Adaptive DLL hijacking / dynamic export forwarding

lazysign

Create fake certs for binaries using windows binaries and the power of bat files

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)