167 matches found
assless-chaps
assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...
GroupPolicyBackdoor
GroupPolicyBackdoor GroupPolicyBackdoor is a python utility for Group Policy Objects GPOs manipulation and exploitation. GPO attack vectors can very often lead to impactful privilege escalation scenarios in Active Directory environments. And yet, offensive security professionals may be reluctant ...
defcon32
Defcon 32 - BugBounty Village Workshop Slides Presentation Slides Unveiling Vulnerabilities: A Comprehensive Guide to Bug Bounty Recon Documentation ProjectDiscovery Docs Installing ProjectDiscovery Tools Install PDTM Fuzzing / DAST Workshop...
scallion
2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...
DefCon25
Lab Setup 1. x2 VM's = Win7 x64 & Win10RS1/2 x64 2. Extract "DefCon-Tool.zip" to the root of the C drive 3. Follow slides and Lab-Writeup.txt...
whoc
whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...
defcon33_silence_kill_edr
🛡️ DEFCON Workshop: Putting EDRs in Their Place 💀 Killing and Silencing EDR Agents Like an Adversary Setup EDR Killing Custom EDR Evasion 🎯 What You’ll Do Each student will be provisioned their own lab environment to: 🔍 Investigate a live EDR agent: discover its hooks, logs, and reach ⚔️ Compile &...
phishing-frenzy
Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...
DEFCON-CICD-pipelines-workshop
CI/CD : The new Eldorado ? Abstract CI/CD pipelines are increasingly becoming part of the standard infrastructure within dev teams, with the rise of new approaches such as Infrastructure as Code, the sensitivity level of such pipelines is escalating quickly. In case of compromise, it is not just...
EventLogging
Notice This repo is no longer maintined as of April 2024 BHIS Notice This repo is no longer maintined as of April 2024 EventLogging This repo contains guidance on setting up event logging. This guidance is broken up into sections, Defensive Readiness Condition DEFCON, and intended to be applied...
Lsass-Shtinkering
Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. Prerequisites The registry value "DumpType" under...
defcon_27_windbg_workshop
"Modern Debugging with WinDbg Preview" DEFCON 27 workshop This repository contains the materials for the DEFCON 27 workshop Overview Abstract It's 2019 and yet too many Windows developers and hackers alike rely on useful but rather old school tools for debugging Windows binaries OllyDbg, Immunity...
defcon27_csharp_workshop
This repository contains a collection of C code snippets and labs for writing custom backdoor payloads, as part of a workshop presented at Defcon 27. The code covers various topics, including Windows API calls, memory allocation, thread creation, and encryption. The code snippets are organized in...
Virtualized (In)Security: How Attackers Can Weaponize VBS Enclaves
Read about Ori David’s presentation at DEF CON 33 and learn how attackers can abuse VBS enclaves, a Windows security feature, for malicious purposes...
Clickjack attack steals password managers’ secrets
Sometimes it can seem as though everything's toxic online, and the latest good thing turned bad is here: Browser pop-ups that look like they're trying to help or authenticate you could be programmed to steal data from your password manager. To make matters worse, most browser extension-based...
Ex-NSA Chief Paul Nakasone Has a Warning for the Tech World
At the Defcon security conference in Las Vegas on Friday, Nakasone tried to thread the needle in a politically fraught moment while hinting at major changes for the tech community around the corner...
The Hacker Who Hunts Video Game Speedrunning Cheaters
Allan “dwangoAC” has made it his mission to expose speedrunning phonies. At the Defcon hacker conference, he’ll challenge one record that's stood for 15 years...
CloudRecon - Finding assets from certificates
CloudRecon Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 Install You must have CGO enabled, and may have to install gcc to run CloudRecon sudo apt install gcc go install github.com/g0ldencybersec/CloudRecon@latest Description CloudRecon CloudRecon is a suite of tools f...
There’s One Last Gift Under the Tree, It’s Hands-On IoT!
It’s the holiday season and since we’re in a giving mood we thought we’d surprise our loyal readers with a fun, hands-on hardware exercise to enjoy during some well-earned downtime. But first, a little background. Every year Rapid7 has a pretty solid presence at DefCon in Las Vegas. This year was...