top of page

Changes is the only thing which never change
IT news & Information Technology Comparison


SharpBlock
A method of bypassing EDR's active projection DLL's by preventing entry point execution. Features: Blocks EDR DLL entry point execution,...


Veil
Veil is a tool for generating metasploit payloads that bypass common anti-virus solutions. It can be used to generate obfuscated...


Invoke-Obfuscation
A PowerShell v2.0+ compatible PowerShell command and script obfuscator. If a victim endpoint is able to execute PowerShell then this tool...
Defense Evasion tools
Veil (Metasploit payload obfuscator) SharpBlock (EDR bypass via entry point execution prevention) Alcatraz (GUI x64 binary obfuscator)...


Essential Windows directories are frequently explored or monitored.
Anyone working in cybersecurity, whether in offensive or defensive capacities like malware analysis and penetration testing or incident...


The sysadmin was seized with panic when Windows Server 2025 installed itself as a result of an error in the labeling of the update.
Web app security firm Heimdal experienced an unexpected wake-up call when customers discovered their systems had automatically upgraded...
Privilege Escalation tools
WinPEAS Windows privilege escalation linux-smart-enumeration Linux privilege escalation Certify Active directory privilege escalation...


BeRoot
BeRoot Project is a post exploitation tool to check common misconfigurations to find a way to escalate our privilege. The goal of BeRoot...


ADFSDump
A C# tool to dump all sorts of goodies from AD FS. Created by Doug Bienstock @doughsec while at Mandiant FireEye. This tool is designed...


ImpulsiveDLLHijack
A C# based tool that automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered Hijacked paths...


Watson
Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Great for...


Sherlock
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Supports: MS10-015 : User Mode...


Get-GPPPassword
Get-GPPPassword is a PowerShell script part of the PowerSploit toolkit, it is designed to retrieve passwords for local accounts that are...


Certify
Certify is a C# tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS). Certify is designed to be...


linux-smart-enumeration
Linux smart enumeration is another good, less verbose, linux privesc tool for Linux. Install + Usage: curl "https://github.com/diego-trei...
bottom of page