BackupOperatorToDA

From Backup Operator To Domain Admin If you compromise an account member of the group Backup Operators you can become the Domain Admin without RDP or WinRM on the Domain Controller. All credit from filipdragovic with his inital POC ! I build this project because I wanted to have a more generic...

HiveJack

HiveJack This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM registry hives and once copied to the attacker machines provides an option to delete these files to clear the trace. Ofte...

Modules

モジュール Havoc Framework で使用されるモジュール。 Powerpick Havoc Framework 用の Powerpick 実装。 InvokeAssembly Havoc Framework 用の InvokeAssembly 実装。 Template これはモジュールの基本テンプレートです。これを使用して、Havoc Framework 用の独自モジュールを作成できます。 SituationalAwareness 多数の Situational Awareness ビーコンオブジェクトファイル。Situational Awareness BOF 由来。...

maalik

Maalik Network Pivoting and Post Exploitation Framework. Features Console Features Desktop notification on new session. Kill Online session easily. Build Maalik Client, Fhdawn easily. Configurable values in settings.ini Root shell. Multithreaded, Get multiple sessions. Maalik is extremenly easy t...

Simple IOC and Incident Response Scanner: Loki

LOKI is a free and simple IOC scanner, a complete rewrite of main analysis modules of our full featured APT Scanner THOR. IOC stands for „Indicators of Compromise“. These indicators can be derived from published incident reports, forensic analyses or malware sample collections in your Lab. LOKI...