Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

A collection of scripts for assessing Microsoft Azure security

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be r…

A collection of Red Team focused tools, scripts, and notes

A PowerShell script anti-virus evasion tool

SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS

Microsoft signed ActiveDirectory PowerShell module

Timeline of Active Directory changes with replication metadata

Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

PowerShell script to find 'vulnerable' security-related GPOs that should be hardended