몾 Artemis @mixic@nanao.cybtex.fr

cpu_rec

A tool that recognizes cpu instructions in an arbitrary binary file. It can be used as a standalone tool, or as a plugin for binwalk

https://github.com/airbus-seclab/cpu_rec

FuncoPop

FuncoPop includes functions & scripts that support attacking Microsoft Azure Funtion Apps, primarily through exploiting Storage Account Access.

https://github.com/NetSPI/FuncoPop

Journée épique - Epic journey

kernel fuzzing 👊​

yeaah~ power is nothing without control ✌️

SweetDreams

A basic Stager Shellcode Tasks Loader

https://github.com/CognisysGroup/SweetDreams

msi-search

This tool simplifies the task for red team operators and security teams to identify which MSI files correspond to which software & enables them to download the relevant file to investigate local privilege escalation vulnerabilities through MSI repairs.

https://github.com/mandiant/msi-search

GIUDA

Ask a TGS on behalf of another user without password

https://github.com/foxlox/GIUDA.git

ida-rust-untangler

An IDA plugin for demangling Rust function names

https://github.com/cxiao/ida-rust-untangler

GetLolDrivers.ps

https://raw.githubusercontent.com/gtworek/PSBits/master/Sysmon/GetLolDrivers.ps1

IDA kmdf

This # python plugin helps the reverser & offers some confort at the beginning of an analysis

https://github.com/thalium/ida_kmdf

aioSMB v0.4.6

Fully asynchronous SMB fuzzer written in pure #python

https://github.com/skelsec/aiosmb

gmsad

gmsad manages Active Directory group Managed Service Account on Linux

Given the keytab of an account which has the ability to retrieve the secret of a gMSA, gmsad creates a keytab for the service account and renew it when necessary. It can execute an arbitrary command just after renewing the keytab.

https://github.com/cea-sec/gmsad

OpenWEC

A free & open source (GPLv3) implementation of a Windows Event Collector server running on GNU/Linux & written in Rust.

https://github.com/cea-sec/openwec

gmsad

gmsad manages Active Directory group Managed Service Account (gMSA) on Linux

https://github.com/cea-sec/gmsad

Blink v1.0

Blink is a brand new unprivileged userspace virtual machine that can emulate x86-64-linux binaries on any POSIX platform.

https://github.com/jart/blink/releases

HyperDbg v3.0

Native debugging tool

https://github.com/HyperDbg/HyperDbg/releases

osslsigncode

OpenSSL based Authenticode signing PE/MSI/Java CAB files

https://github.com/mtrojnar/osslsigncode

• Cracking PKCS#12 passwords

https://tij.me/blog/finding-and-utilising-leaked-code-signing-certificates/

Demo 38:15 - 41:18

https://www.youtube.com/watch?v=YnxGW8Fvqvk

https://raw.githubusercontent.com/yardenshafir/conference_talks/main/OffensiveCon_2023_Your_Mitigations_are_My_Opportunities.pdf