rmdavy

HeapsOfFun. AMSI Bypass Via the Heap

AMSI_Ordinal_Bypass. Bypass AMSI and Defender using Ordinal Values

badodf. Creates a malicious ODF document help leak NetNTLM Creds

WordAmsiBypass.

AmsiPEBWalkVBA. Walking the PEB in VBA

VBAFunctionPointers. VBA

AmsiPEBWalkVBAx64. VBA

redtest. PowerShell

hashmatch. Audits AD hashdump and looks for instances for password reuse

ntlmrelayx-wrap. Wrapper Code for Impacket NTLMRelayX

enumprocmodules. Get Amsi Function Addresses Using EnumProcessModules & Half a Peb walk

PasswordAuditor. Password Auditor generates various useful outputs for reporting when conducting a Windows based password Audit

symboliclink-testing-tools. C++

reads. REsponder Active Database Sifter

RedTeam-Tools. Tools and Techniques for Red Team / Penetration Testing

go_nessus_parser. A set of tools for parsing the output from nessus files into a more condensed format

Kerberoasting. I have created a small C# project that requests a Ticket Granting Service ticket using KerberosSecurityTokenProvider to use for Kerberoasting. I started the project for educational purposes only, but the tool works fine and is not detected by Microsoft Defender for Identity.

pathchecker. Checks if folders in PATH are writable

ipfreely. Python

qdsp. Quick and Dirty SPN Parser

hash2spray. make spraying a little easier