G0ldenGunSec

Obfuscated Powershell Empire 2.x stager that allows for creation of a macro which uses VBA to backdoor .lnk files on the system. This is done to obtain a shell via follow-up user interaction natively...

G0ldenGunSec

Determine if the WebClient Service (WebDAV) is running on a remote system

G0ldenGunSec

A Powershell implementation of PrivExchange designed to run under the current user's context

G0ldenGunSec

Original testing version of the backdoorLnkMacroStager - please reference backdoorLnkMacroStagerObfuscated or backdoorLnkMacroStagerCellEmbed for current versions

G0ldenGunSec

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

G0ldenGunSec

Load .net assemblies from memory while having them appear to be loaded from an on-disk location.

G0ldenGunSec

.net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems

G0ldenGunSec

Extension functionality for the NightHawk operator client

G0ldenGunSec