Nick Landers

sRDI. Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

Koppeling. Adaptive DLL hijacking / dynamic export forwarding

FlyingAFalseFlag. Slides and Code for the BHUSA 2019 talk: Flying a False Flag

Trebuchet. MS15-076 Privilege Escalation

minibus. Remote code execution in Power Platform connectors via JSON deserialization

mailorder. Nalpeiron Licensing Service (NLSSRV32) arbitrary disk read [CVE-2019-19315]

DomainFrontingLists. A list of Domain Frontable Domains by CDN

Empire. Empire is a pure PowerShell post-exploitation agent.

CTFd-secure-flags. CTFd secure flags plugin

PowerTools. PowerTools is a collection of PowerShell projects with a focus on offensive operations.

kerbrute. A tool to perform Kerberos pre-auth bruteforcing

ruler. A tool to abuse Exchange services

ysoserial.net. Deserialization payload generator for a variety of .NET formatters

shellcc. Building optimized shellcode using GCC. Suited for learning assembly and playing with the ABI

SMBTrap. Tools developed to test the Redirect to SMB issue

DotNetToJScript. A tool to create a JScript file which loads a .NET v2 assembly from memory.

changed-files. :octocat: Github action to retrieve all (changed, added, modified, deleted) files.

soft-carrot.

symcc. SymCC: efficient compiler-based symbolic execution

mkdocs-material. Documentation that simply works

NetScalerEPABypass. A quick and dirty way to bypass encrypted EPA to connect to a NetScaler Gateway

counterfit. a CLI that provides a generic automation layer for assessing the security of ML models

windows-itpro-docs. This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

SiriProxy. Siritron Modded version

pyDHE. A reference implementation of Diffie-Hellman in Python

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

sandbox-attacksurface-analysis-tools. Set of tools to analyze Windows sandboxes for exposed attack surface.

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.