Tools for discovery and abuse of COM hijacks

ADFS Brute-Force Login Script

Azure DevOps Services Attack Toolkit

Alternative Shellcode Execution Via Callbacks

Script for generating hostapd-wpe configuration files and spoofed certificates

HTTP parameter discovery suite.

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

Azure Security Resources and Notes

Tools for decoding TPM SPI transaction and extracting the BitLocker key from them.

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file for…

C++ implementation of a BOF to enumerate various types of files useful for post-exploitation

Creating a repository with all public Beacon Object Files (BoFs)

Various Cobalt Strike BOFs

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

↕️🤫 Stealth redirector for your red team operation security

Ansible playbook to deploy a phishing engagement in the cloud.

Self-developed tools for Lateral Movement/Code Execution

Dump cookies directly from Chrome process memory

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

Cobaltstrike addons to interact with clipboard

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

A collection of Cobalt Strike Aggressor scripts.

AutoStart teamserver and listeners with services

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

Cold Boot Attack Tools for Linux

C or BOF file to extract WebKit master key to decrypt user cookie

BOF to steal browser cookies & credentials