Adversary Emulation Framework

Windows Exploit Suggester - Next Generation

Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.

Process Injection

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Various Cheat Sheets

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

🐟 PoC of a VBA macro spawning a process with a spoofed parent and command line.