Dwight Hohnstein

SharpChromium. .NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

SharpWeb. .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.

SharpShares. Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.

WireTap. .NET 4.0 Project to interact with video, audio and keyboard hardware.

EventLogParser. Parse PowerShell and Security event logs for sensitive information.

SharpLogger. Keylogger written in C#

SharpSearch. Search files for extensions as well as text within.

CSharpSetThreadContext. C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread

cliProxy. Proxy Unix applications in the terminal

ScatterBrain. Suite of Shellcode Running Utilities

1PasswordSuite. Utilities to extract secrets from 1Password

.NET-Profiler-DLL-Hijack. Implementation of the .NET Profiler DLL hijack in C#

ProcessReimaging. Process reimaging proof of concept code

KittyLitter. Credential Dumper

macos_shell_memory. Execute MachO binaries in memory using CGo

TSMSISrv_poc. C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll

wlbsctrl_poc. C++ POC code for the wlbsctrl.dll hijack on IKEEXT

SharpSC. Simple .NET assembly to interact with services.

HookDetector. Playing with PE's and Building Structures by Hand

SharpScreenshot. Dead simple C# project to take a screenshot.

CSharpCreateThreadExample. C# code to run PIC using CreateThread

librarian. Shared library loading application for Linux written in Go.

spfwalker. Tool to walk SPF records for relevant domain names and Whois information.

GitSecrets. Script to help enumerate and dig through Github and Github Enterprise installations.

SharpEdge. C# Implementation of Get-VaultCredential

gosharedlib. Shared library example to be loaded by the github.com/djhohnstein/librarian application

ghidorah. Golang Brute Force Tool

MailSniper. MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

portscanner. Golang portscanning tool

r77-rootkit. Ring 3 Rootkit DLL

CPPWebClient. Web client to wrap GET and POST requests in C++

essdp_fork. Fork of Evil SSDP from InitString. Adds base64 authentication, redirect urls and customizable realm options for internal phishing.

self-morphing-csharp-binary. C# binary that mutates its own code, encrypts and obfuscates itself on runtime

VaultBreaker. A toolset designed for attacks against common password managers.

localGPT. Chat with your documents on your local device using GPT models. No data leaves your device and 100% private.

polarbearrepo. C++

ScheduleRunner. A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

SharpNeedle. Inject C# code into a running process

PowerShell-Book-Labs. PowerShell labs from various books

DerbyCon2019. Code & Slides For DerbyCon 2019

all-MiniLM-L6-v2-tfjs. all-MiniLM-L6-v2-tfjs

evilrdp. Python

Priv2Admin. Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

MSBuildAPICaller. MSBuild Without MSBuild.exe

SCShell. Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

Vuln-Server-Exploits. Exploits for Vuln Server (http://www.thegreycorner.com/2010/12/introducing-vulnserver.html)

PowerShell. NetSPI PowerShell Scripts