3gstudent/Invoke-BuildAnonymousSMBServer

Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.

334

Worse-PDF

331

Homework-of-Python

Python codes of my blog.

Use powershell to list the RDP Connections History of logged-in users or all users

321

List-RDP-Connections-History

Remove individual lines from Windows XML Event Log (EVTX) files

253

Eventlogedit-evtx--Evolution

Learn from Casey Smith @subTee

246

Javascript-Backdoor

Use CLR to inject all the .NET apps

242

msbuild-inline-task

175

CLR-Injection

Batchfile

170

Homework-of-C-Sharp

C Sharp codes of my blog.

169

pyKerbrute

Use python to perform Kerberos pre-auth bruteforcing

Asynchronous Procedure Calls

168

Inject-dll-by-APC

Use to check the valid account of the Remote Desktop Protocol(Support plaintext and ntlmhash)

163

SharpRDPCheck

154

Inject-dll-by-Process-Doppelganging

Process Doppelgänging

151

backup-3gstudent.github.io

old blog

SCSS

146

Smbtouch-Scanner

Automatically scan the inner network to detect whether they are vulnerable.

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

140

ntfsDump

powershell codes of my blog.

110

Homework-of-Powershell

Use-COM-objects-to-bypass-UAC

Use powershell to test Office-based persistence methods

Office-Persistence

Windows-User-Clone

Create a hidden account

Use subProcessTag Value From TEB to identify Event Log Threads

Windows-EventLog-Bypass

Use to perform Microsoft exchange account brute-force.

APT34-Jason

pyXSSPlatform

Used to build an XSS platform on the command line.

Use bitsadmin to maintain persistence and bypass Autoruns

CVE-2017-8464-EXP

Support x86 and x64

bitsadminexec

Code-Execution-and-Process-Injection

Powershell to CodeExecution and ProcessInjection

No inline asm,support x86/x64

Shellcode-Generater

From 32-bit process to 64-bit process

test

just test

CreateRemoteThread

2 ways of Password Filter DLL to record the plaintext password

PasswordFilter

Dump-Clear-Password-after-KB2871997-installed

From-System-authority-to-Medium-authority

Penetration test

Use Waitfor.exe to maintain persistence

Waitfor-Persistence

Powershell to copy ntds.dit

Bypass-Windows-AppLocker

NinjaCopy

use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)

COM-Object-hijacking

Auto install WinPcap on Windows(command line)

3gstudent.github.io

Blog

SCSS

Winpcap_Install

Batchfile

ewsManage

My exercise of using Exchange Web Service(EWS)

HiddenNtRegistry

Use NT Native Registry API to create a registry that normal user can not query.

Go code examples of my blog.

Homework-of-Go

signtools

From Windows SDK

Eventlogedit-evt--General

Remove individual lines from Windows Event Viewer Log (EVT) files

PNG-Steganography

Steganography Payload

Use to browse the share file by eas(Exchange Server ActiveSync)

easBrowseSharefile

Bypass-McAfee-Application-Control--Code-Execution

source&exe

Small modification version of p0wnedShell

Smallp0wnedShell

ListInstalledPrograms

List the programs that the current Windows system has installed

powershell to hide process by kd.exe

AutoIt-Keylogger

AutoIt

Hide-Process-by-kd.exe

An example of a downloader written in NodeJS.

NodeJS-Downloader

JavaScript

Use-msxsl-to-bypass-AppLocker

Learn from Casey Smith@subTee

XSLT

GetExpiredDomains

Search for available domain from expireddomains.net

Execute DLL via the Excel.Application object's RegisterXLL() method

ExcelDllLoader

JavaScript

Add-Dll-Exports

Use to generate DLL through Visual Studio

Execute-CSharp-From-XSLT-TEST

Writeup

PNG_stego-test

SendMail-with-Attachments

Use powershell to send mail

Enumerate all processes and get specified file's handle,then close it.

Catch-specified-file-s-handle

A sample IE BHO for logging Internet Explorer's POST data.

pdf

IE-BHO-POSTdata-Logger

Record my reverse analysis of WanaCrypt0r

WanaCrypt0r-Reverse-Analysis

bgi-creater

Use BGInfo to bypass Application Whitelisting

Powershell to get wlan keys

Get-Wlan-Keys

Homework-of-Java

Java codes of my blog

Java

3gstudent

regsvr32-test

Test if the website allows user registration

Test-Exploit-for-Joomla-3.4.4-3.6.4