TeamViewer-dumper Dump TeamViewer ID and password from memory. Works much better than other tools. Tested on TeamViewer 13 (latest): Win10, Win8.1, Win7x64, Win7x32 Download pip3 install frida git clone https://github.com/attackercan/teamviewer-dumper.git Usage...
Fox and the Hound Fox connects to your BloodHound database to perform various queries to generate statistics about the target Active Directory environment. This includes: Total number of user objects...
AllTools All reasonably stable tools CpuStres – thread/CPU stress testing app DriverMon – monitor any driver activity GFlagsX – enhanced version of the GFlags tool Kdump – generate a local kernel dump Kdump64 – generate...
Intro These scripts are a PoC for how to extract unencrypted private SSH keys from Windows when the new OpenSSH ssh-agent.exe is used. When adding private keys to ssh-agent, Windows protects the private...
Visual Basic GUI (VBG for short) uses an X11 forwarded SSH session to remotely execute commands on the client. Motivation On its usual mode of operation SSH requires the client...
ProcessHider is a post-exploitation tool designed to hide processes from monitoring tools such as Task Manager and Process Explorer, thus preventing the admins from discovering payload’s processes. The tool works...
Sudohulk This tool change sudo command, hooking the execve syscall using ptrace, tested under bash and zsh supported architectures: 86_64 x86 arm Use NOTES: PID = bash or zsh...
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS Introduction Mimikatz, developed by Benjamin Delpy (@gentilkiwi), is a well-regarded post-exploitation tool, which allows adversaries to extract plain text passwords, NTLM...
GoFetch GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application. It first loads a path of local admin users and computers generated by BloodHound and converts...
Maintaining Access / Network PenTest / Post Exploitation
by do son · Published May 2, 2018 · Last modified June 3, 2018
WinPwnage: Elevate, UAC bypass, persistence, privilege escalation, dll hijack techniques The meaning of this repo is to study the techniques. All of the samples/techniques are found online, on different blogs...
Invoke-ACLpwn Invoke-ACLpwn is a tool that automates the discovery and pwnage of ACLs in Active Directory that is unsafely configured. For background information, read the release blog. Invoke-ACLpwn is designed...
Empire GUI The Empire Multiuser GUI is a graphical interface to the Empire post-exploitation Framework. It was written in Electron and utilizes websockets (SocketIO) on the backend to support multiuser...
audit_scripts Scripts to gather system configuration information for offline/remote auditing The audit scripts are a set of scripts intended to be run in systems to recover useful information for them....
pwnat, pronounced “Poe-nat”, is a tool that allows any number of clients behind NATs to communicate with a server behind a separate NAT with *no* port forwarding *no* DMZ setup,...
Windows Privilege Escalation Windows Privilege Escalation Techniques and Scripts CopyAndPasteFileDownloader.bat Windows file transfer script that can be pasted to the command line. File transfers to a Windows machine can be...
Support Securityonline.info site. Thanks!
