Use OSV-Scanner to find existing vulnerabilities affecting your project’s dependencies. OSV-Scanner provides an officially supported frontend to the OSV database that connects a project’s list of dependencies with the vulnerabilities that affect them. Since the …
Continue readingMonth: December 2022
deepinstinct/Dirty-Vanity
The reflected shellcode works with ntdll API. It is generated from the included generation project shellcode_template, curtesy of https://github.com/rainerzufalldererste/windows_x64_shellcode_template https://github.com/deepinstinct/Dirty-Vanity
Continue readingGame Of Active Directory v2
The second version of Game Of Active directory is out! https://github.com/Orange-Cyberdefense/GOAD https://mayfly277.github.io/posts/GOADv2/
Continue readingPyramid – A Tool To Help Operate In EDRs’ Blind Spots
Pyramid is a set of Python scripts and module dependencies that can be used to evade EDRs. The main purpose of the tool is to perform offensive tasks by leveraging some Python evasion properties and …
Continue readingMonitor hybrid security using Microsoft Defender for Cloud and Microsoft Sentinel
This reference architecture illustrates how to use Microsoft Defender for Cloud and Microsoft Sentinel to monitor the security configuration and telemetry of on-premises and Azure operating system workloads. This includes Azure Stack. Download a Visio …
Continue readingMFASweep
MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials and will attempt to identify if MFA is enabled. https://github.com/dafthack/MFASweep
Continue reading