SharpSniper

SharpSniper Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO. SharpSniper is a simple tool to find the IP address of these users so that you can target their box. It requires...

SharpHound

SharpHound SharpHound を入手 SharpHound の最新ビルドは常にこちらにあります。 デプロイされている BloodHound CE インスタンスと互換性のある SharpHound のバージョンを確認するには、BloodHound CE の Web UI にログインし、⚙️（設定）→ Download Collectors をクリックします。次に、ユーザーインターフェースの「Download SharpHound」ボタンをクリックするか、表示されている SharpHound...

Sojobo

Sojobo - A binary analysis framework Sojobo is an emulator for the B2R2 framework. It was created to easier the analysis of potentially malicious files. It is totally developed in .NET so you don't need to install or compile any other external libraries the project is self contained. With Sojobo...

AoratosWin

AoratosWin AoratosWin is a tool that removes traces of executed applications on Windows OS which can easily be listed with tools such as ExecutedProgramList by Nirsoft. Feel free to decompile, reverse, redistribute, etc. Supported OS Tested On Windows 7 x86, x64 Windows 8 x86, x64 Windows 8.1 x86...

PoshSecFramework

PoshSec Framework For the Scripts and Modules to work, please refer to the below documentation. The PoshSec Framework or PSF is a graphical front end utility for running PowerShell scripts, modules, and cmdlets. The PSF exposes parts of it's interface to PowerShell within the individualized...

Harden-Windows-Security

Harden Windows Security | A New Threat to Malware Windows를 안전하게, 보안적으로, 오직 공식 Microsoft 방법으로만 강화하세요 사용 방법 관련 항목 신뢰 지원 보안 권장 사항 리소스 라이선스 Wiki 기본 FAQ !IMPORTANT 이 저장소의 중요한 섹션으로 빠르게 접근할 수 있는 바로가기입니다 Harden System Security 앱 AppControl Manager 앱 !NOTE 이 저장소는 Windows OS에서 Microsoft가 이미 구현한 기능만 사용하여 타사...

Chisel-Strike

Chisel-Strike A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. Why write this? In my experience I found socks4/socks4a proxies quite slow in comparison to its socks5 counterparts and a lack of implementation of socks5...

CVE-2023-23397

A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

SharpSploit

SharpSploit SharpSploit is a .NET post-exploitation library written in C that aims to highlight the attack surface of .NET and make the use of offensive .NET easier for red teamers. SharpSploit is named, in part, as a homage to the PowerSploit project, a personal favorite of mine! While SharpSplo...

ExecuteAssembly

Description: ExecuteAssembly is an alternative of CS execute-assembly, built with C/C++ and it can be used to Load/Inject .NET assemblies by; reusing the host spawnto process loaded CLR Modules/AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassi...

CVE-2017-8759-exploits

CVE-2017-8759-exploits Two versions of CVE-2017-8759 exploits Example 1 - Downloads a .Net dll from a remote location without touching disk, loads and executes Example 2 - Loads an embedded .Net dll and executes...

exch_CVE-2021-42321

exchCVE-2021-42321 This is the tool involved in the 7bits security team article "DotNet Security - CVE-2021-42321 Reproduction" Change the TypeConfuse chain to write to file, bypass Windows Defender to disable the w3wp.exe startup process. Overwrite the original ysoserial.net file with this file,...

ysoserial.net

Инструмент proof-of-concept для генерации полезных нагрузок, эксплуатирующих небезопасную десериализацию объектов .NET. Описание ysoserial.net — это набор утилит и «цепочек гаджетов» gadget chains на основе property-oriented programming, обнаруженных в распространённых библиотеках .NET, которые п...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

SharpWhispers

SharpWhispers SysWhispers2의 C 포팅입니다. 시스템 콜 스텁을 실행하기 위한 코드 케이브를 찾는 데 SharpASM을 사용합니다. 기술적 세부 사항은 블로그 게시물에서 확인하세요: https://www.secforce.com/blog/sharpasm-sharpwhispers/ 요구 사항 Visual Studio .NET Framework = 3.5 Python3 사용법 root@kitploit: / / / | | /| / / / \ / / / / \ |/ |/ / / -/ / - - /////,//...

vba2clr

TLDR: VBA에서 AccessVBOMVisual Basic 프로젝트에 대한 프로그래밍 방식 액세스가 신뢰되지 않음을 우회한 후 AppDomain.ExecuteAssembly 또는 기타 편리한 방법을 사용하여 CLR.NET 어셈블리를 VBA에 로컬 및 원격으로 로드하는 다양한 방법을 실험하고 있습니다. vba2clr..vba: AccessVBOM 레지스트리 키를 1로 설정합니다. Word.Application COM 개체를 인스턴스화합니다. Excel.Application, MS PowerPoint, Access 등이 될 수...

XorStringsNET

XorStringsNET A tool for simple and quick XOR based string encryption of .NET binaries XORStrings implements a simple XOR based cipher, I call RXOR. RXOR does not only encrypt the string but also reverses its character order. Each string is encrypted with a unique key. The arguments used by the...

Get-PDInvokeImports

Get-PDInvokeImports Description: Get-PDInvokeImports is tool PowerShell module which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke usage in assembly. Showing all locations from where they are referenced and Exports all to DnSpyBookmarks.xml This PS module could...