
RunAs-Stealer
RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
adversarial-attackpassword-attackspost-exploitation+1
208

RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging

Infection Monkey - An open-source adversary emulation platform

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

Weaponizing DCOM for NTLM Authentication Coercions

Collection of VBA macro published in our twitter / blog

Leak NTLM via Website tab in teams via MS Office