Mert Daş

PrivKit. PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.

SharpTerminator. Terminate AV/EDR Processes using kernel driver

RedPersist. C#

Slayer. Just an AV slayer. Nothing special ;)

SharpIncrease. A Tool that aims to evade av with binary padding

SharpLateral. Lateral Movement

ValleyTerminator. Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver

ClearEventlogBOF. Clear Event Logs

SharpLDAP. SharpLDAP is a tool written in C# that aims to do enumeration via LDAP queries

ChromeKatz. Dump cookies directly from Chrome process memory

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

BeaconEye. Hunts out CobaltStrike beacons and logs operator command output

Coercer. A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Obfuscator. A program for obfuscating C strings

mertdas.

Windows-Internals. Important notes and topics on my journey towards mastering Windows Internals