woodenshoemalware Goto Github PK

adpeas

Powershell tool to automate Active Directory enumeration.

art-of-creating-machines

badchars

Bad char generator to instruct encoders such as shikata-ga-nai to transform those to other chars.

bloodhound

Six Degrees of Domain Admin

bloodhound.py

A Python based ingestor for BloodHound

buffer_overflow

Don't let buffer overflows overflow your mind

chisel

A fast TCP/UDP tunnel over HTTP

code-snippets

Various code snippets

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dirtycow

dirtycow

dirtycow.github.io

Dirty COW

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dostackbufferoverflowgood

ebowla

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

enterprise-pentesting

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

exploits

Windows Exploits

flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

fullpowers

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

hrshell

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

impacket

Impacket is a collection of Python classes for working with network protocols.

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

juicy-potato-x86

Juicy Potato for x86 Windows

linux-kernal-exploits-m-

linux-kernel-exploits

localroot-all-cve

Localroot-ALL-CVE~