netbiosX

Checklists. Red Teaming & Pentesting checklists for various engagements

Default-Credentials. Default usernames and passwords for various systems (VoIP,IPMI,Oracle).

Digital-Signature-Hijack. Binaries, PowerShell scripts and information about Digital Signature Hijacking.

Pentest-Bookmarks. Database of websites for penetration testing

AMSI-Provider. A fake AMSI Provider which can be used for persistence.

GhostLoader. GhostLoader - AppDomainManager - Injection - 攻壳机动队

CheatSheets. Commands to perform various activities related to penetration testing and red teaming

iPurpleTeam. Frameworks, Methodologies, Detection Rules and Tooling for establishing a Purple Team program.

Red-Teaming-Toolkit. A collection of open source and commercial tools that aid in red team operations.

Social-Engineering-Payloads. Collection of generic social engineering payloads

Red-Team-CheatSheets. The website version of CheatSheets

Execute-CSharp-From-XSLT-TEST. XSLT

ApplicationWhitelistBypassTechniques. A Catalog of Application Whitelisting Bypass Techniques

Pentest-Scripts. Scripts that can be used in penetration testing engagements.

awesome-sec-talks. A collected list of awesome security talks

Credential-Dumping. This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential Access) with examples. There are multiple ways to perform the same tasks

subTee-gits-backups. subTee gists code backups

Red-Team-Infrastructure-Wiki. Wiki to collect Red Team infrastructure hardening resources

Shellcode-Via-HTA. How To Execute Shellcode via HTA

AD-control-paths. Active Directory Control Paths auditing and graphing tools

lazykatz. Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.

netbiosX. Config files for my GitHub profile.

StegoKatz. Mimikatz encoded into various files

Aggressor-scripts. Aggressor scripts I've made for Cobalt Strike

Checklists-Website. The website version for checklists project

Interceptor. PowerShell HTTP(s) Intercepting Proxy

DotNetToJScript. A tool to create a JScript file which loads a .NET v2 assembly from memory.

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

Evil. Executes Mixed .NET and Native DLL via regsvr32

Sim. C# User Simulation

RogueMMC. Execute Shellcode And Other Goodies From MMC

MaliciousMacroGenerator. Malicious Macro Generator

AllTheThings. Includes 5 Known Application Whitelisting/ Application Control Bypass Techniques in One File.

nishang. Nishang - PowerShell for penetration testing and offensive security.

hackerEnv. Shell

RegistrationFreeCOM. Inject DLL Prototype using Microsoft.Windows.ACTCTX COM Object

PoshRat. PowerShell Reverse HTTPs Shell

gcat. A fully featured backdoor that uses Gmail as a C&C server

windows-operating-system-archaeology. windows-operating-system-archaeology @Enigma0x3 @subTee

EvilWMIProvider. Installs And Executes Shellcode

Misc-PowerShell-Stuff. random powershell goodness

HatDBG. Minimal WIN32 Debugger in powershell

SCTPersistence. Create COM Objects backed by Scripts, not DLLs

Utils. Execute Mimikatz In Memory - InstallUtil, Regsvcs, Regasm

MimikatzLite. Minimal MimiKatz One Executable... All credits to Benjamin Delpy @gentilkiwi

DerbyCon2016. Code Samples and Slides From DerbyCon 2016

AppInitGlobalHooks-Mimikatz. Hide Mimikatz From Process Lists

kernelpop. kernel privilege escalation enumeration and exploitation framework

ClickOnceKatz. Execute Mimikatz Inside of ClickOnce Application