Steve Borosh

FindFrontableDomains. Search for potential frontable domains

Bolthole. Dig your way out of networks like a Meerkat using SSH tunnels via ClickOnce.

SharpPrinter. Discover Printers

MSBuildAPICaller. MSBuild Without MSBuild.exe

SharpSMBSpray. Spray a hash via smb to check for local administrator access

SharpCOM. CSHARP DCOM Fun

NoMSBuild. MSBuild without MSbuild.exe

Azure-App-Tools. Collection of tools to use with Azure Applications

SharpExcel4-DCOM. Port of Invoke-Excel4DCOM

Word-Doc-Video-Embed-EXE-POC. HTML

SharpFruit. A C# penetration testing tool to discover low-haning web fruit via web requests.

RendezvousRAT. Self-healing RAT utilizing libp2p

MimeSpray. MimeCast Password Spraying Tool

PenTesting-Scripts. A ton of helpful tools

FindIngressEmail. Find Inbound Email Domains

PELoader. Load PE via XML Attribute

RuralBishop. D/Invoke port of UrbanBishop

CrypoCurrencyPowerShell. PowerShell

FlaskRedirectorProtector. Protect your servers with a secret header

Sharp-Suite. My musings with C#

HashCant. Some Hashcat Rules for 2020 and beyond. Contributions encouraged!

MSSQLUDPScanner. Discover MSSQL Instances via UDP Scanning

DInjector. Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

OSGiScanner. Scan for OSGi Consoles

eavesarp. Analyze ARP requests to identify hosts that are communicating with one another.

SharpSSDP. SSDP Service Discovery

Phunter. Phunter is an osint tool allowing you to find various information via a phone number 🔎📞

UACSilentCleanup. C#

SharpEdge. C# Implementation of Get-VaultCredential

Armitage-Cortana-Resource-Opener. Open Resource Files in Armitage with Cortana

Carnac. Carnac The Magnificent: Pancakeswap Prediction Market Bot

POSH-Commander. Invoke remote powershell scripts in memory of compromised hosts.

PoC-in-GitHub. 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

CanaryServer. Fake SMB and SAMR data

MiniDump. alternative to procdump

SpoolFool. Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

ociRecon. A Python tool for listing and managing various Oracle Cloud Infrastructure (OCI) resources using the OCI API.

SkiDzEX. A modded version of ConfuserEx | SkiDzEx

Shellcode-Via-HTA. How To Execute Shellcode via HTA

KeyTabExtract. Extracts Key Values from .keytab files

LeakedWallpaper. Leak of any user's NetNTLM hash. Fixed in KB5040434

BEAR. Bear C2 is a compilation of C2 scripts, payloads, and stagers used in simulated attacks by Russian APT groups, Bear features a variety of encryption methods, including AES, XOR, DES, TLS, RC4, RSA and ChaCha to secure communication between the payload and the operator machine.

atomic-red-team. Small and highly portable detection tests.

NET-Obfuscate. Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

365Inspect. A PowerShell script that automates the security assessment of Microsoft Office 365 environments.

CVE-2021-21973. Proof of Concept Exploit for vCenter CVE-2021-21972

Posh-Runas. PowerShell

OracleCommander. Oracle Commander

CVE-2021-1675. Impacket implementation of CVE-2021-1675

bbot. OSINT automation for hackers.

ADEnum. Active Directory Enumeration Tool

MiscTools. Miscellaneous Tools

X-Commander. MySQLlX Multitool

RDP-Users. Lists the IP, hostname, and Active Directory username of Remote Desktop Protocol (RDP) users connected to a Windows Terminal Server.

C2-Tool-Collection. A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

trufflehog. Find credentials all over the place

NtDumpBOF. C