top of page

Changes is the only thing which never change
IT news & Information Technology Comparison


LaZagne
Nice tool for extracting locally stored passwords from browsers, databases, games, mail, git, wifi, etc. Install: (Binary) You can...


LaZagne
Great tool for gaining access to hashed and cleartext passwords on a victims endpoint. Once you have gained privileged access to a...


Mimikatz
Great tool for gaining access to hashed and cleartext passwords on a victims endpoint. Once you have gained privileged access to a...


Access copilot for M365 through terminal(Living off the o365 land with powerpwn)
The sector event this year went incredibly well, and a copilot pawn hacking thought was obtained. Particularly if we are able to identify...


moonwalk
moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. It saves the state of...


ScareCrow
ScareCrow is a payload creation framework for side loading (not injecting) into a legitimate Windows process (bypassing Application...


AMSI Fail
AMSI.fail is a great website that can be used to generate obfuscated PowerShell snippets that break or disable AMSI for the current...


Mangle
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC)...


Alcatraz
Lea obfuscation Install: (Requirements) Install: https://vcpkg.io/en/getting-started.html vcpkg.exe install asmjit:x64-windows vcpkg.exe...


SharpBlock
A method of bypassing EDR's active projection DLL's by preventing entry point execution. Features: Blocks EDR DLL entry point execution,...


Veil
Veil is a tool for generating metasploit payloads that bypass common anti-virus solutions. It can be used to generate obfuscated...


Invoke-Obfuscation
A PowerShell v2.0+ compatible PowerShell command and script obfuscator. If a victim endpoint is able to execute PowerShell then this tool...
Defense Evasion tools
Veil (Metasploit payload obfuscator) SharpBlock (EDR bypass via entry point execution prevention) Alcatraz (GUI x64 binary obfuscator)...


Essential Windows directories are frequently explored or monitored.
Anyone working in cybersecurity, whether in offensive or defensive capacities like malware analysis and penetration testing or incident...


The sysadmin was seized with panic when Windows Server 2025 installed itself as a result of an error in the labeling of the update.
Web app security firm Heimdal experienced an unexpected wake-up call when customers discovered their systems had automatically upgraded...
bottom of page