Showing posts with label PowerShell. Show all posts
Showing posts with label PowerShell. Show all posts
Sunday, August 12, 2018

Goddi (Go Dump Domain Info) - Dumps Active Directory Domain Information

›
Based on work from Scott Sutherland (@_nullbind), Antti Rantasaari, Eric Gruber (@egru), Will Schroeder (@harmj0y), and the PowerView ...
Thursday, January 25, 2018

Windows Event Log Killer - Invoke-Phant0m

›
This script walks thread stacks of Event Log Service process (spesific svchost.exe) and identify Event Log Threads to kill Event Log...
Sunday, January 7, 2018

Tool to simulate fake processes of analysis sandbox/VM software - Fake Sandbox Processes (FSP)

›
This small script will simulate fake processes of analysis, sandbox and/or VM software that some malware will try to avoid. You can dow...
Saturday, October 7, 2017

PowerShell Remote Download Cradle Generator and Obfuscator - Invoke-CradleCrafter

›
Invoke-CradleCrafter is a PowerShell v2.0+ compatible PowerShell remote download cradle generator and obfuscator. Purpose In...
Thursday, September 21, 2017

Microsoft PowerShell Module to Find HoneyPots and HoneyTokens in the Network - HoneypotBuster

›
Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. ...
Saturday, June 24, 2017

Powershell C2 Server and Implants - PoshC2

›
PoshC2 is a proxy aware C2 framework written completely in PowerShell to aid penetration testers with red teaming, post-exploita...
Saturday, May 27, 2017

Tool to find missing Windows patches for Local Privilege Escalation Vulnerabilities - Sherlock

›
PowerShell script to quickly find missing Microsoft patches for local privilege escalation vulnerabilities. Currently looks for...
Friday, May 26, 2017

A Framework That Creates An Advanced FUD Dropper With Some Tricks - Dr0p1t-Framework 1.2

›
Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives ...
Tuesday, October 25, 2016

Malicious WMI Events using PowerShell - PowerLurk

›
PowerLurk is a PowerShell toolset for building malicious WMI Event Subsriptions. The goal is to make WMI events easier to fire off during a ...