Dave Hardy

sysinternals. The full SysInternals Suite

PowerShell-Scripts. Repository for my PowerShell scripts

Invoke-WinRMAttack. PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.

PoSHBypass. C#

SAP-Stuff.

Alternate-Data-Streams. PowerShell

Marlin-2.0.x-SKR-Mini-E3-v1.2. My Working Firmware for the SKR E3 Mini - Use at own risk!!!!

Get-HttpSecHead. This cmdlet will get the HTTP headers from the target webserver and test for the presence of various security related HTTP headers and also display the cookie information.

fat-finger. NMAP script to enumerate users via finger

powershell-1. PowerShell

DEFCON25_PS_Workshop. Materials of Workshop presented at DEFCON 25

Invoke-DownFileToClip. A simple function to download a file and add it to the clipboard

PowerUpSQL. PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

Cheatsheets. Helped during my OSCP lab days.

ApplicationWhitelistBypassTechniques. A Catalog of Application Whitelisting Bypass Techniques

Bash-Bunny-Payloads. PowerShell

addict. Get a full Active Directory REST API in 30 seconds

Custom-BashBunny-Payloads. HTML

DEFCON25_Attack_Defend_ActiveDirectory_Workshop. This hands on workshop teaches you how to both attack and defend Active Directory. We will start by deploying an Active Directory environment using the typical security settings found in most medium to large organizations. Participants will then learn current common methods and tools used to exploit Active Directory against their test environments. Participants will create a hardened Active Directory environment using advanced methods to secure domain controllers from attack and then try to compromise their hardened environments.

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

AD-Auditor. Active Directory Auditing Framework

caddy-golf-sticks. HTML

ThreatHunter-Playbook. A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

API-Security-Checklist. Checklist of the most important security countermeasures when designing, testing, and releasing your API

BashBunny-1. PowerShell

C2-Bunny. Silent trinity progress with bash bunny

bluekeep_CVE-2019-0708_poc_to_exploit. Porting BlueKeep PoC from @Ekultek to actual exploits

CVE-2021-1675. C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527