Oddvar Moe

UltimateAppLockerByPassList. The goal of this repository is to document the most common techniques to bypass AppLocker.

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

CVE-2023-23397-POC-Powershell. PowerShell

PowerAL. A Powershell module that helps you identify AppLocker weaknesses

RedTeamScripts. Just some random Red Team Scripts that can be useful

PowershellScripts. A collection of useful Powershell Scripts that I have created

Powershell-ICMP. PowerShell

Narrator-dll. Example code on how to use a custom dll during dll hijack on Narrator.exe as a persistence

AppLocker-Stuff. Just some random stuff for AppLocker

BGInfo. PowerShell

usernamecrafter. A C project that generates usernames based on input lists and format you decide yourself

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

trevorc2. TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

impacket. Impacket is a collection of Python classes for working with network protocols.

dnsrecon. DNS Enumeration Script

zeroday-powershell. A PowerShell example of the Windows zero day priv esc

Windows-SignedBinary. Python

Go365. An Office365 User Attack Tool

sysinternals-source. HTML

RegistrationFreeCOM. Inject DLL Prototype using Microsoft.Windows.ACTCTX COM Object

TREVORspray. TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

regln. Windows Rregistry Linking Utility

DerbyCon2019. Code & Slides For DerbyCon 2019

ADExplorerSnapshot.py. ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

WindowsScriptHostExtension. Extend WSH functionality with Registration-Free COM

api0cradle.github.io.

o365spray. Username enumeration and password spraying tool aimed at Microsoft O365.