EDR-Checker Invoke-EDRChecker will check running processes, process metadata, Dlls loaded into your current process and each DLLs metadata, common install directories, installed services, the registry and running drivers for the...
SharpRDP – Remote Desktop Protocol Console Application for Authenticated Command Execution How it works The terminal services library (mstscax.dll) has two different forms that can leveraged, the scriptable control that...
enumy Enumy is an ultra-fast portable executable that you drop on target Linux machine during a pentest or CTF in the post-exploitation phase. Running enumy will enumerate the box for common security...
ADCollector ADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment...
Maintaining Access / Post Exploitation
by do son · Published April 21, 2020 · Last modified November 2, 2021
pwncat Netcat with Firewall and IPS evasion, bind and reverse shell, local and remote port-forward. Motivation Ever accidentally hit Ctrl+c on your reverse shell and it was gone for good? Ever waited...
htbenum A Linux enumeration script for Hack The Box This script is designed for use in situations where you do not have internet access on a Linux host and would...
Chromepass – Hacking Chrome Saved Passwords Chromepass is a python-based console application that generates a windows executable with the following features: Decrypt Chrome saved passwords Send a file with the...
Ps-Tools, an advanced process monitoring toolkit for offensive operations. Having a good technical understanding of the systems we land on during an engagement is a key condition for deciding what...
lollipopz Data exfiltration utility used for testing the detection capabilities of security products. Obviously for legal purposes only. Download git clone https://github.com/tasooshi/lollipopz.git Use /etc/shadow -> HTTP GET requests Server #...
Pulsar Pulsar is a tool for data exfiltration and covert communication that enables you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols,...
mssqlproxy mssqlproxy is a toolkit aimed to perform a lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server....
cookie_crimes – Chrome Cookie Extraction Without Root This will print out a user’s Chrome cookies. You don’t need to have their password or be root to use it. nice nice...
Decrypt TeamViewer Enumerate and decrypt TeamViewer settings from the registry. It’s a little C# tool that uses @Blurbdust‘s kickass work (CVE-2019-18988) to enumerate and decrypt TeamViewer credentials from the Windows...
gtfo This is a standalone script written in Python 3 for GTFOBins. You can search for Unix binaries that can be exploited to bypass system security restrictions. These binaries can be...
Invoke-CleverSpray Password Spraying Script detecting current and previous passwords of Active Directory User by @flelievre Behavior: Retrieves default or specified domain (to specify a domain, use the -Domain parameter) using Get-NetDomain...
Support Securityonline.info site. Thanks!
