Carlos Perez

dnsrecon. DNS Enumeration Script

Posh-SSH. PowerShell Module for automating tasks on remote systems using SSH

Metasploit-Plugins. Plugins for Metasploit Framework

Posh-SecMod. PowerShell Module with Security cmdlets for security work

powershell_scripts. Powershell Scripts

Posh-Sysmon. PowerShell module for creating and managing Sysinternals Sysmon config files.

Meterpreter-Scripts. Meterpreter Scripts that I'm working on

Posh-Shodan. PowerShell Module to interact with the Shodan service

vscode-language-aggressor. Cobalt Strike Aggressor extension for Visual Studio Code

Posh-VirusTotal. PowerShell Module to interact with VirusTotal

DEFCON25_PS_Workshop. Materials of Workshop presented at DEFCON 25

Veil-PowerView. Veil-PowerView is a powershell tool to gain network situational awareness on Windows domains.

vscode-sysmon. Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.

ADAudit. Windows PowerShell module to help in the auditing of Active Directory environments.

SysmonLinux.Util. PowerShell Module for parsing logs generated by Sysinternals Sysmon for Linux

pyforensics. Collection of single use scripts I worte for windows forensics

Presentations. Presentation Slides

Nessus-Bridge-for-Metasploit. nessus plugin for metasploit to connect to a nessus server

Posh-Metasploit. PowerShell module to automate via XMLRPC a remote Metasploit server.

ThreatHunter-Playbook. A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sysmon logs.

Posh-Tweet. PowerShell Module for intearcting with Twitter

MDNSRecon. Script for Ubuntu/BackTrack for MSDN Enumeration using Avahi-Utils

EventHunt. PowerShell

Posh-OpenPGP. PowerShell Module for automating actions using OpenPGP

ThreatHunting. An informational repo about hunting for adversaries in your IT environment.

PowerShell-AD-Recon. PowerShell Scripts I find useful

Agressor-Scripts. C#

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

Nessus-V2-Parser. Parser for .nessus v2 xml files to various formats.

windows-event-forwarding. A repository for using windows event forwarding for incident detection and response

Posh-NVS. PowerShell Module for the Nessus Vulnerability Scanner

GetAuditPol. Example of getting audit policy using C++

SIMP. Information Repository for SIMP

PowerForensics. PowerShell - Live disk forensics platform

OctoPS. PowerShell Core module for automating tasks against the OctoPrint API.

ruby-nessus. Ruby-Nessus is a ruby interface for the popular Nessus vulnerability scanner.

tap. The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

VI-ToolBox. Collection of PowerCLI functions in module format that I use in my day to day operations of a VMware Infrastructure

WMI_Persistence. A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics

Event-Forwarding-Guidance. NSA Information Assurance guidance for Windows Event Forwarding and Windows Event Log monitoring. iadgov

defcon_27_windbg_workshop. DEFCON 27 workshop - Modern Debugging with WinDbg Preview

golang-dns. DNS library in Go

defcon27_csharp_workshop. Writing custom backdoor payloads with C# - Defcon 27

Registry. Full featured, offline Registry parser in C#

ptf. The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

sysmon-modular. A repository of sysmon configuration modules

AllTheThings. Includes 5 Known Application Whitelisting/ Application Control Bypass Techniques in One File.

IPHelper. C# example for building a PowerShell module

unicorn. Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Windows-Auditing-Guide.

Generate-Macro. This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

Klipper-Macro-Scheduler. Schedule Klipper macros with flexible timing options

ShellcodeStdio. A mini-framework for easily writing compiler optimized position independent x86 shellcode for windows platforms.