S4UTomato Escalate Service Account To LocalSystem via Kerberos. Traditional Potatoes Friends familiar with the “Potato” series of...
Network PenTest
Chimera While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a...
Chrome Cookie Stealer (and injector) Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily...
NixImports A .NET malware loader, using API-Hashing and dynamic invoking to evade static analysis. NixImports aims to...
Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or...
psudohash Psudohash is a password list generator for orchestrating brute force attacks and cracking hashes. It imitates...
Html Smuggling HTML smuggling is a malicious technique used by hackers to hide malware payloads in an...
KRBUACBypass UAC Bypass By Abusing Kerberos Tickets This POC is inspired by James Forshaw (@tiraniddo) shared at...
ADCSKiller – An ADCS Exploitation Automation Tool ADCSKiller is a Python-based tool designed to automate the process...
PE-Obfuscator PE obfuscator with Evasion in mind needs Admin Privilege in order to load the RTCore64 driver....
canTot canTot is a python-based cli framework based on sploitkit and is easy to use because it...
PrivKit PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on...
RecycledInjector (Currently) Fully Undetected same-process native/.NET assembly shellcode injector based on RecycledGate by thefLink, which is also based on...
LOAD – Lord Of Active Directory Based on AWS-Redteam-Lab and OCD GOAD The price for running the...
ShellGhost A memory-based evasion technique which makes shellcode invisible from process start to end. Handling the Thread...