MSBuildAPICaller
A tool for interacting with the MSBuild API, enabling malicious activities and evading detection.
Have you ever been on an internal network assessment and discovered an unauthenticated writable Windows-based file share? In addition to finding potentially sensitive information, you can abuse this to gather user hashes from users who are browsing the file share. In this attack, a special file with a SCF file extension is placed onto the file share. SCF files can control Windows Explorer, but in this case, we use one to elicit an unsuspecting user to submit their NTLMv1/2 hash to us, the attacker.
A tool for interacting with the MSBuild API, enabling malicious activities and evading detection.
A tool for iOS pentesting and research with a GUI version available.
Pentest active directory LAB project for practicing attack techniques.
A post-exploitation framework for attacking running AWS infrastructure
A framework for exploiting Android-based devices and applications
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.