CanIBeSpoofed
PipeViewer
| CanIBeSpoofed | PipeViewer | |
|---|---|---|
| 1 | 7 | |
| 34 | 530 | |
| - | 1.1% | |
| 2.2 | 7.3 | |
| 9 months ago | 9 months ago | |
| C# | C# | |
| - | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CanIBeSpoofed
-
Scanning 1.7 million Australian domains and finding 1.62 million SPF & DMARC security issues
Yep! He open-sourced the scanning engine he uses. You can check it out here - https://github.com/Rices/CanIBeSpoofed
PipeViewer
- 🔥 PipeViewer: A new tool for viewing Windows Named Pipes and searching for insecure permissions. 🔥
-
Discovering Six Critical Docker Desktop Privilege Escalation Vulnerabilities. (Bonus: New OSS Tool!)
Eviatar also put his new tool PipeViewer up on github as well. https://github.com/cyberark/PipeViewer
What are some alternatives?
RPCMon - RPC Monitor tool based on Event Tracing for Windows
ETWProcessMon2 - ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.
ImpulsiveDLLHijack - C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.
defcon27_csharp_workshop - Writing custom backdoor payloads with C# - Defcon 27 Workshop
KRBUACBypass - UAC Bypass By Abusing Kerberos Tickets
frostbyte - FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads
DPAPISnoop - A C# tool to output crackable DPAPI hashes from user MasterKeys