w0rk3r's Windows Hacking Library

Stored passwords found all over the place after installing Windows in company networks  http://blog.win-fu.com/2017/08/stored-passwords-found-all-over-place.html @WindowsHackingLibrary

SafetyKatz: a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader. https://github.com/GhostPack/SafetyKatz @WindowsHackingLibrary

Robber : An open source tool for finding executables prone to DLL hijacking https://github.com/MojtabaTajik/Robber @WindowsHackingLibrary

Another way to get to a system shell – Assistive Technology https://oddvar.moe/2018/07/23/another-way-to-get-to-a-system-shell @WindowsHackingLibrary

Domain Goodness – How I Learned to LOVE AD Explorer https://www.blackhillsinfosec.com/domain-goodness-learned-love-ad-explorer/ @WindowsHackingLibrary

GhostPack https://posts.specterops.io/ghostpack-d835018c5fc4 @WindowsHackingLibrary

Pass the Hash with Kerberos https://malicious.link/post/2018/pass-the-hash-with-kerberos/ @WindowsHackingLibrary

PowerShell is definitely a "gateway drug" to C# - GhostPack is a collection of new security tools (currently C#), getting rid of the attention that powershell monitoring is getting https://github.com/GhostPack @WindowsHackingLibrary

Microsoft LAPS Security & Active Directory LAPS Configuration Recon https://adsecurity.org/?p=3164 @WindowsHackingLibrary

Compromising a Azure Windows 2008 R2 SP1 VM https://guptaashish.com/2018/07/04/compromising-a-azure-windows-2008-r2-sp1-vm @WindowsHackingLibrary

Persistence using GlobalFlags in Image File Execution Options – Hidden from Autoruns.exe https://oddvar.moe/2018/04/10/persistence-using-globalflags-in-image-file-execution-options-hidden-from-autoruns-exe @WindowsHackingLibrary

Weaponize PDF with embedding SettingContent-ms inside PDF. https://github.com/DidierStevens/DidierStevensSuite/blob/master/make-pdf-embedded.py @WindowsHackingLibrary Via: @InfosecN1nja

Anonymously Enumerating Azure File Resources https://blog.netspi.com/anonymously-enumerating-azure-file-resources @WindowsHackingLibrary

Exploiting a Windows 10 PagedPool off-by-one overflow (WCTF 2018) https://j00ru.vexillium.org/2018/07/exploiting-a-windows-10-pagedpool-off-by-one/ @WindowsHackingLibrary

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode. https://github.com/NetSPI/PESecurity @WindowsHackingLibrary

Catch me if u can: Bypassing Memory Scanners with Cobalt Strike and Gargoyle https://labs.mwrinfosecurity.com/blog/experimenting-bypassing-memory-scanners-with-cobalt-strike-and-gargoyle @WindowsHackingLibrary

Clear all your logs in linux/windows servers https://github.com/Rizer0/Log-killer @WindowsHackingLibrary

Veil Payloads and Veil-Ordnance https://www.fortynorthsecurity.com/veil-payloads-and-veil-ordnance/ @WindowsHackingLibrary

Application Whitelisting Bypass and Arbitrary Unsigned Code Execution Technique in winrm.vbs https://posts.specterops.io/application-whitelisting-bypass-and-arbitrary-unsigned-code-execution-technique-in-winrm-vbs-c8c24fb40404 @WindowsHackingLibrary

Passing-the-Hash to NTLM Authenticated Web Applications https://labs.mwrinfosecurity.com/blog/pth-attacks-against-ntlm-authenticated-web-applications/ @WindowsHackingLibrary