Carrie Roberts

DPAT. Domain Password Audit Tool for Pentesters

GatherContacts. A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results

SlackExtract. A PowerShell script to download all files, messages and user profiles that a user has access to in slack.

CookieCrimesJS. A cross-platform one-liner to steal a user's cookies from Chrome <- cool

Detect-SSLmitm. This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.

Commentator. PowerShell

VBAstomp. A repository of example VBA stomped documents

PowerShellForInfoSec. PowerShell

EvilClippy. A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

G-chimp. An automated way to send phishing emails from Google/G-suite.

DeployREMnux. DeployREMnux is a Python script that will deploy a cloud instance of the public REMnux distribution in the Amazon cloud (AWS).

TellTail. A tool to display Windows Event logs as they happen.

AtomicRunner. PowerShell

AttackEmulationTools. PowerShell

Presentations. Slides from Security Conferences Presentations

YaraRules. A collection of yara rules for detection of malicious content

Gather-Usernames-From-Google-LinkedIn-Results.

ChromeShot. Capture web screenshots using Chrome. No other dependencies required. Works cross platform.

dc8-deployment-PUBLIC. PowerShell

Get-ChromePasswords. Get chrome passwords from chrome database in powershell

Export-ATPCustomDetections. This cross-platform PowerShell script will download all ATP detections you have access to including scheduled (custom), shared and user (personal) queries.

community. Open-source ATT&CK procedures

Invoke-SheetUnprotect. PowerShell

AtomicRedTeamHooks. PowerShell

invoke-atomicredteam. PowerShell

PurpleTeaming. Files to support the AntiSyphon PurpleTeaming class

clr2of8.github.io. HTML

PS4I-AIcoding. PowerShell

AtomicRedteam. PowerShell

ProcessInjection. This program is designed to demonstrate various process injection techniques

deployment. Code for deploying lab vm's in Azure cloud

Invoke-SocksProxy. Socks proxy server using powershell. Supports local and reverse connections for pivoting.