A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities - preempt/ntlm-scanner

Avast JavaScript Interactive Shell . Contribute to taviso/avscript development by creating an account on GitHub.

I have something fun for you, I pulled the javascript interpreter out of Avast and ported it to Linux 😆 This runs unsandboxed as SYSTEM, any vulns are wormable pre-auth RCE on 400M endpoints  ¯\_(ツ)_/¯ github.com/taviso/avscript 🐧

Kerberos is the preferred way of authentication in a Windows domain, with NTLM being the alternative. Kerberos authentication is a very…

This video presents two demos of LVI (Load Value Injection) proof of concept attacks. In the first, the attacker redirects the victim code execution like in a ROP (return-oriented programming) attack. In the second, zero is injected as an AES-NI round key…

Windows active user credential phishing tool. Contribute to hlldz/pickl3 development by creating an account on GitHub.

Scanner for CVE-2020-0796 - SMBv3 RCE. Contribute to ly4k/SMBGhost development by creating an account on GitHub.

Welcome to the C2 Matrix!!

Course materials for Modern Binary Exploitation by RPISEC - GitHub - RPISEC/MBE: Course materials for Modern Binary Exploitation by RPISEC

[ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;. Contribute to Winbagility/Winbagility development by creating an account on GitHub.

Introduction Actions is a CI/CD pipeline, built into GitHub, which was made generally available back in November 2019. Actions allows us to build, test and deploy our code based on triggers...

After the introduction of PowerShell detection capabilities, attackers did what you expect and migrated over to less scrutinised technologies, such as .NET. Fast-forward a few years and many of us...

red team, blue team, penetration testing, red teaming, threat hunting, digital forensics, incident response, cyber security, IT security

Written by Rindert Kramer Introduction A while back during a penetration test of an internal network, we encountered physically segmented networks. These networks contained workstations joined to t…

C2concealer is a python3 command-line tool that generates c2 malleable profiles for use with Cobalt Strike. Looking to get up and running quick? Code is available here. C2concealer: what's the story?Red team assessments and penetration tests involve a ton…