A swiss army knife for pentesting networks
-
Updated
Sep 24, 2020 - Python
{{ message }}
PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language. Initially a Windows component, it was made open source and cross-platform with the introduction of PowerShell Core which is built on .NET Core.
A swiss army knife for pentesting networks
Undetectable Windows Payload Generation
A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
Open source pre-operation C2 server based on python and powershell
记录自己编写、修改的部分工具
Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell).
generate reverse shell from CLI for linux and Windows.
Automated Tactics Techniques & Procedures
Python script to decode common encoded PowerShell scripts
FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
Detecting Lateral Movement with Machine Learning
outis is a custom Remote Administration Tool (RAT) or something like that. It was build to support various transport methods (like DNS) and platforms (like Powershell).
PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.
Examples and samples for PaperCut users
A collection of Python scripts that make daily tasks easier and quicker. Hack your way through daily tasks with hacker-scripts!
CredsStealer allows an attacker to craft a highly convincing credentials prompt using Windows PromptForCredential, validate it against the DC or localmachine and in turn leak it via an HTTP request.
VSCode with preconfigured tools for your programming languages : binaries, settings, extensions and documentations
Quick start for Errbot on Windows with PowerShell Integration
Exploitation Tool For Windows Using Batch and Powershell
Powerful script for logical obfuscation of powershell scripts
Bulk ARF file converter
Extracts Azure authentication tokens from PowerShell process minidumps. https://www.lares.com/blog/hunting-azure-admins-for-vertical-escalation-part-2/
Run PowerShell command without invoking powershell.exe
A faster way to navigate folders and browse files in Windows and Linux shells.
Created by Microsoft
Released November 14, 2006
POST on JobService/Jobs with sample payload below tuned to specific devices
{
"Id": 0,
"JobName": "Inventory job for foo devices ",
"JobDescription": "Inventory job for foo devices",
"Schedule": "startnow",
"State": "Enabled",
"JobType": {
"Name": "Inventory_Task"
},
"Targets": [
{
"Id": <device_id>,
"Data": "",
"TargetType": {
"I