How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro
This project is a technical guide and reference for internal network penetration testing. It serves as a collection of procedures for exploiting and navigating private corporate networks during security assessments. The repository provides specialized manuals and cheat sheets focused on active directory attacks, lateral movement, and privilege escalation. It includes a post-exploitation playbook for maintaining system persistence and clearing forensic traces. The documentation covers a broad range of security capabilities, including initial access, network pivoting and tunneling, and interna
Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a
MSEdgeRedirect is a tool that intercepts specific Microsoft Edge processes — including News, Search, Widgets, and Weather — and redirects their content to open in the system's default browser instead. It operates by modifying Windows registry keys, using Image File Execution Options to intercept Edge executable launches and redirect them to the default browser protocol handler.
The main features of rcmaehl/msedgeredirect are: Browser Process Redirectors, Default Browser Protocol Handlers, Process Execution Modifiers, Execution Redirection, Image File Execution Options Redirectors, Search Query Redirections.
Projects with overlapping indexed features include: lolbas-project/lolbas — LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security… requestly/requestly. ridter/intranet_penetration_tips — This project is a technical guide and reference for internal network penetration testing. It serves as a collection of… samratashok/nishang — Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows… oddcod3/phantom-evasion — Phantom-Evasion is a security research framework designed for generating obfuscated payloads and automating… sukkaw/surge — Surge is a network traffic routing and configuration system designed to categorize and steer network requests using…
