CheeseTools

CheeseTools Este repositorio se ha creado basándose en el ya existente MiscTool, así que un gran agradecimiento a rasta-mouse por publicarlos y darme la motivación adecuada para trabajar en ellos. CheeseExec Ejecución de comandos / Movimiento lateral mediante funcionalidad similar a PsExec. Debe...

Tater

Tater Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. Credit All credit goes to @breenmachine, @foxglovesec, Google Project Zero, and anyone else that helped work out the details for this exploit. Potato - https://github.com/foxglovesec/Potato Included...

BARK

BARK BARK significa BloodHound Attack Research Kit. Es un script de PowerShell diseñado para ayudar al equipo de BloodHound Enterprise a investigar y validar continuamente primitivas de abuso. BARK actualmente se enfoca en el conjunto de productos y servicios de Microsoft Azure. BARK no requiere...

Stompy

Stompy Una función de PowerShell para realizar timestomping en archivos y directorios especificados. La función puede modificar marcas de tiempo de forma recursiva para todos los archivos en un directorio. Cambiar marcas de tiempo para archivos o directorios individuales. Aplicar marcas de tiempo...

PowerShell-Red-Team

PowerShell-Red-Team-Enum Colección de funciones de PowerShell que un Red Teamer puede usar para recolectar datos de una máquina u obtener acceso a un objetivo. Agregué archivos ps1 para los comandos incluidos en el módulo RedTeamEnum. Esto te permitirá encontrar y usar fácilmente un solo comando ...

Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

CVE-2020-0668

CVE-2020-0668 Make CVE-2020-0668 exploit work for version = win10 v1903 Diaghub Exploit evil.dll STEP 2：execute exp.ps1 with powershell STEP 3：execute Diaghub.exe C:\ProgramData evil.dll to load dll and add user. Diaghub UsoDllLoader Exploit = v1903 powershell exploit works on version = win10 v19...

PowerLurk

PowerLurk PowerLurk is a PowerShell toolset for building malicious WMI Event Subsriptions. The goal is to make WMI events easier to fire off during a penetration test or red team engagement. Please see my post Creeping on Users with WMI Events: Introducing PowerLurk for more detailed information:...

ToolShell

用于 SharePoint ToolShell 的漏洞利用工具。 博客：https://blog.viettelcybersecurity.com/sharepoint-toolshell/ 使用方法： python exploit.py -u -c 例如： python exploit.py -u http://10.0.1.12/sites/test -c calc @l0gg...

Windows-exploit-suggester

windows-exploit-suggester.ps1 A local privilege-escalation L...

Flerken

Flerken Introduction Command Line Obfuscation CLOB has been proved to be a non-negligible factor in fileless malware or malicious actors that are "living off the land". With dozens of obfuscation tools seen in the wild, by contrast few proper countermeasures can be found. In this talk, we present...

SkyRAT

SkyRAT A Powershell Remote Administration Tool...

ElectronVulnerableVersion

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129 This PowerShell script downloads Sysinternals Strings, recursively searches for strings within all .exe files across all drives, and compares the Electron version found with known patched versions below to determine vulnerability to...

Powershell-RAT

Powershell-RAT Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends the information to an attacker as an e-mail...

Invoke-CradleCrafter

Invoke-CradleCrafter v1.1 Introduction Invoke-CradleCrafter is a PowerShell v2.0+ compatible PowerShell remote download cradle generator and obfuscator. Background In the Fall of 2016 after releasing Invoke-Obfuscation, I continued updating my spreadsheet of PowerShell remote download cradles...

DevSec-Defense

DevSec-Defense Accompanying PowerShell Modules & Demos for DevSec Defense Presentation DevSec Defense: How DevOps Practices Can Drive Detection Development For Defenders...

PeekABoo

PeekABoo PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Window...

PT-ToolKit

PT-ToolKit Exploits, Powershell Scripts, Executables that are useful during Penetration-Testing or Red Team engagement Most of the Tools and Script are aimed to Active-Directory environment and windows platfform Table of Contents Exploits PowerShell-Scripts Windows-Binary Exploits: Some exploits...

unicorn

unicorn 作者：Dave Kennedy @HackingDave 网站：https://www.trustedsec.com Magic Unicorn 是一个简单工具，用于实施 PowerShell 降级攻击并将 shellcode 直接注入内存。基于 Matthew Graeber 的 PowerShell 攻击方法以及 David Kennedy（TrustedSec）和 Josh Kelly 在 Defcon 18 上展示的 PowerShell 绕过技术。 使用非常简单，只需运行 Magic Unicorn（确保已安装 Metasploit 且路径正确），Magic...