Dylan Evans

evilgophish. evilginx3 + gophish

cypherhound. Your template-based BloodHound terminal companion tool

secretsdump.py. Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction.

StoneKeeper. StoneKeeper C2, an experimental EDR evasion framework for research purposes

ASPJinjaObfuscator. Heavily obfuscated ASP web shell generation tool.

NativeThreadpool. Work, timer, and wait callback example using solely Native Windows APIs.

IoDllProxyLoad. DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly

HookFinder. Simple PoC to locate hooked functions by EDR in ntdll.dll

CosmicRakp. CVE-2013-4786 Go exploitation tool

AddRemoteDA.py. Active Directory post exploitation kit for security purposes

DPAT. Domain Password Audit Tool for Pentesters

SAMPasswordReuseChecker.py. A Python tool for detecting local admin password reuse across SAM files in an Active Directory environment, with support for user blacklisting and optional Excel reporting.

CVE-2024-4956. CVE-2024-4956 Python exploitation utility

ChatGPT-Prompts. Useful ChatGPT prompts for offensive security work

hashcat. World's fastest and most advanced password recovery utility

PoolParty. A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Shiro1Extractor. Python utility for extracting Apache Shiro 1 hashes from OrientDB files

Shiro1Tools. Tools that were used during the development of the Apache Shiro 1 Hashcat module

Nuages. A modular C2 framework

BloodHoundQueryLibrary. A community-driven collection of BloodHound queries

chisel. A fast TCP/UDP tunnel over HTTP

CVE-2024-5764. CVE-2024-5764 exploitation script

ldd_json_parser.sh. A bash script for parsing JSON files from ldapdomaindump, extracting and printing computer DNS names or user names to stdout.