Commit Graph

Select branches

Hide Pull Requests

add_too_check_detection_urls

feat/add_missing_WDAC_bypasses

master

revert-170-fixes/mitre_attack_realignment

#1

#1

#101

#104

#105

#106

#107

#109

#110

#111

#112

#117

#118

#120

#121

#122

#125

#126

#127

#129

#130

#131

#132

#134

#135

#136

#140

#143

#144

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#156

#158

#159

#160

#161

#162

#163

#164

#166

#167

#168

#169

#17

#170

#174

#175

#176

#177

#178

#179

#180

#182

#183

#184

#185

#186

#187

#188

#189

#19

#191

#192

#193

#194

#195

#196

#197

#197

#198

#199

#2

#2

#20

#201

#202

#203

#204

#205

#206

#207

#209

#210

#211

#213

#214

#216

#217

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#233

#234

#235

#236

#236

#237

#238

#239

#240

#241

#242

#242

#244

#245

#25

#251

#252

#253

#255

#256

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#276

#277

#278

#28

#280

#281

#283

#284

#286

#288

#29

#290

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#300

#301

#303

#305

#306

#307

#308

#309

#310

#312

#314

#315

#317

#319

#319

#32

#320

#321

#321

#322

#323

#324

#325

#326

#327

#329

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#340

#341

#342

#343

#343

#344

#345

#347

#348

#349

#350

#351

#352

#353

#354

#355

#356

#357

#358

#358

#359

#36

#360

#361

#362

#363

#364

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#381

#382

#383

#384

#386

#387

#388

#389

#39

#390

#391

#392

#394

#396

#398

#398

#40

#400

#401

#401

#402

#403

#404

#405

#407

#408

#409

#410

#411

#413

#414

#416

#417

#418

#419

#42

#420

#422

#424

#425

#425

#426

#427

#428

#429

#430

#431

#432

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#470

#471

#472

#473

#474

#475

#475

#476

#477

#478

#478

#479

#48

#480

#482

#483

#484

#485

#486

#487

#489

#49

#490

#491

#492

#493

#495

#495

#496

#496

#497

#498

#499

#50

#502

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#52

#53

#54

#55

#56

#57

#58

#59

#60

#61

#63

#64

#66

#67

#70

#71

#72

#73

#74

#75

#76

#77

#79

#80

#81

#82

#87

#88

#89

#90

#92

#93

#94

#95

#96

#97

#98

#99

Mono Color

• f06df108ee Update Msoxmled.yml (#512) master bogackaya 2026-06-16 21:35:36 +03:00
• 406ccc34a5 Create setupugc.yml for OS binaries configuration Wietze 2026-06-15 23:40:28 +01:00
• 6985f2ad3e Adding setupupc.exe (#498) karminang 2026-06-16 06:39:31 +08:00
• af48960e10 Add msoxmled.exe for INetCache downloads (#458) bogackaya 2026-06-16 01:02:48 +03:00
• 1c2234bd3a Change Outlook command to use {REMOTEURL} placeholder Wietze 2026-06-15 22:53:11 +01:00
• 8b476a5e4f Updates to scp.exe, sftp.exe and new outlook.exe entry (#265) C-h4ck-0 2026-06-16 04:03:43 +07:00
• c8939ac93d Fix command description in Scp.yml Wietze 2026-06-15 21:04:30 +01:00
• 24a46a7e52 Add SCP.exe for execute operation (#509) x90slide 2026-06-16 01:20:20 +05:30
• 5814631f55 Windows Sandbox abuse via wsb.exe (#504) unrooted 2026-06-14 22:27:23 +02:00
• fe428063d6 Adding mscopilot.exe and mscopilot_proxy.exe (#497) 4n4s4zi 2026-05-09 04:16:00 -07:00
• db6da5b030 Adding VirusTotal link to DevToolsLauncher.yml, closes #155 Wietze 2026-03-16 14:12:08 +00:00
• 2a21e4a4b4 Create Logger.yml (#448) Avihay Eldad 2026-03-16 16:00:01 +02:00
• 6a6364085b Create Nmcap.yml (#462) Avihay Eldad 2026-03-16 15:51:21 +02:00
• 41458bdce0 Add App Paths Hijacking (Proxy Execution) to WorkFolders.exe (#490) ghosts621 2026-03-16 06:43:24 -07:00
• fb87ee5f08 Add new Proxy Execution techniques for dxcap.exe and cmstp.exe (#489) ghosts621 2026-03-16 06:33:27 -07:00
• c39a24f3ce Create write.yml (#440) Majkel Skopniarz 2026-03-16 14:19:47 +01:00
• cea80b95ee Adding cipher.exe entry (#274) Alexander Sennhauser 2026-03-16 13:30:32 +01:00
• 42a5add3c7 UAC bypass via odbcad32.exe GUI (#460) Ekitji 2026-03-14 12:59:51 +01:00
• 0c3b8d7786 Added Sigverif.yml (#469) Tonmoy Jitu 2026-03-14 22:48:31 +11:00
• b463e865f3 Create IntelliTrace.yml (#464) Avihay Eldad 2025-12-07 00:05:02 +02:00
• 005c784dab Wsl and bash (#468) Liran Ravich 2025-12-07 00:02:52 +02:00
• f793a4d5c9 Create Bcp.yml (#476) MahirAli Khan 2025-12-07 03:04:11 +05:30
• dcca4db04a Improve GitHub Actions workflows (#467) Wietze 2025-10-02 18:14:34 +01:00
• 2d7441bb9a Fixing typo in Mpiexec.yml Wietze 2025-09-29 22:09:42 +01:00
• db83c335cb Update Regsvr32.yml (#461) vict0ni 2025-09-29 23:55:00 +03:00
• 9d6d66a3cd Create Mpiexec.yml (#466) Avihay Eldad 2025-09-29 23:51:25 +03:00
• 58a6ef8d1e Create AppLauncher.yml (#465) Avihay Eldad 2025-09-29 23:50:52 +03:00
• 7b44bd9ac6 Create Pixtool.yml (#463) Avihay Eldad 2025-09-29 23:47:41 +03:00
• 6d07c2dee1 Add RDS Binaries (#453) idabian 2025-09-10 21:08:49 +03:00
• cb3ee9b4a5 ADD reset.exe (#454) Black Shade 2025-09-10 20:40:42 +03:00
• b2550124fe iscsicpl.exe UAC bypass (#455) Ekitji 2025-08-31 18:09:32 +02:00
• b04a5c9776 Create XBootMgr.yml (#447) Avihay Eldad 2025-08-31 18:38:57 +03:00
• ed6d8aa11d Create Ntsd.yml (#449) Avihay Eldad 2025-08-31 18:33:36 +03:00
• e0f262f32b Create WinDbg.yml (#450) Avihay Eldad 2025-08-31 18:22:52 +03:00
• 5927125030 docs: 📚 Add Detection Sigma ref (#451) frack113 2025-07-22 22:27:15 +02:00
• a4199124bc Update XBootMgrSleep.yml (#445) Avihay Eldad 2025-07-10 12:47:39 +03:00
• 4ea5c504a4 Add PhotoViewer.yml (#441) Avihay Eldad 2025-06-28 17:04:30 +03:00
• 803118bda7 Add resources link (#442) TimOne 2025-06-27 10:56:39 +08:00
• 967d88a0fa Update Sqldumper.yml (#439) itssixtyn3in 2025-06-11 11:30:51 -07:00
• 9016c65b87 Create CODEOWNERS (#438) Wietze 2025-06-01 13:21:27 +01:00
• ea4d2a87b0 Update Winget.yml (#436) Fred Cyber Security 2025-06-01 14:15:55 +02:00
• d6e3d7016d Update Mmc.yml (#437) Fred Cyber Security 2025-06-01 14:04:47 +02:00
• e31a869ae4 Add ECMangen.yml (#373) Avihay Eldad 2025-05-28 16:22:56 +03:00
• dcad562e5f Add XBootMgrSleep.yml (#381) Avihay Eldad 2025-05-28 16:15:30 +03:00
• d5ce81d2c8 Update Certutil.yml with new flag and update previous flag (#402) LocalLoopBack 2025-05-26 13:16:10 -07:00
• 387546895e feat: Indirect Command Execution via sftp.exe (#434) Swachchhanda Shrawan Poudel 2025-05-26 22:48:15 +05:45
• 373d0a52bb Update Shell32.yml (#435) socketz 2025-05-26 18:43:59 +02:00
• f8b06c611f Added Cipher (#410) iamtutu 2025-04-26 15:42:34 -04:00
• 18b1648e97 Added wbemtest.exe (#430) saulpanders 2025-04-26 15:27:13 -04:00
• e15a9c3e27 Updates for ATT&CK v17 Wietze 2025-04-26 20:23:10 +01:00
• 7dbdad68e9 vshadow mitre technique fix (#428) lazarg 2025-04-16 08:23:26 +00:00
• afee674ff0 Update Cmdkey.yml: Swap to archive.org for expired link (#429) Jeff McJunkin 2025-04-16 04:16:45 -04:00
• f20158d734 Create WFMFormat.yml (#413) tbaker57 2025-02-16 00:33:23 +10:00
• a79893e7ad Generalising file paths and urls, see #10 (#422) Wietze 2025-01-28 11:15:01 +00:00
• e62749f81a Adding file paths (#416) ciwen3 2025-01-14 07:12:42 -08:00
• b9a6cd6a87 Adding Execute tags to most LOLBas (#405) hegusung 2024-12-29 18:31:01 +01:00
• baaa5bbc73 Update Runscripthelper.yml (#407) SecurityAura 2024-11-10 12:31:41 -05:00
• f69b8abae1 Removing empty resource sections Wietze 2024-10-02 01:54:59 +01:00
• 22568aff10 Updating workflow order, fixes #254 (#404) Wietze 2024-10-02 01:47:36 +01:00
• 7e171658dd Remove broken imgur link Wietze 2024-10-02 01:20:22 +01:00
• 55d84345ac Adding <version> placeholder to Vshadow Wietze 2024-10-01 23:45:18 +01:00
• 39a7120d40 Adding Windows file path validation for values of File_Path (#403) Wietze 2024-10-01 23:14:19 +01:00
• d8402e6651 Add VSLaunchBrowser.yml (#367) Avihay Eldad 2024-10-02 00:37:11 +03:00
• 50e17c089a Add ComputerDefaults.yml (#400) Eron Clarke 2024-09-25 17:47:41 -05:00
• 9b1a98794b Update Wmic.yml (#355) Avihay Eldad 2024-09-15 19:31:17 +03:00
• 9ee5548623 Updates in Stordiag.exe (#394) Ekitji 2024-09-10 14:31:38 +02:00
• bfa71cc57e Add DTUtil.yml (#382) Avihay Eldad 2024-09-07 17:16:04 +03:00
• cfd827fe6d Fixing some paths / adding some paths, this will improve upstream hunting tool efficacy if proper paths are referenced in the yml (#392) p4yl0ad 2024-09-07 15:07:46 +01:00
• 61bff01584 Odbcconf.yml - Corrected incorrect privileges (#396) deadjakk 2024-09-07 08:01:46 -06:00
• 659a0240e8 Update Winget.yml (#384) unrooted 2024-08-18 00:52:52 +02:00
• d5d11f47a1 Add Xsd.yml (#366) Avihay Eldad 2024-08-18 00:18:59 +03:00
• 5b12df2b93 Makecab - LOLBAS command, more information about Windows compatibility (#389) TAbdiukov 2024-08-18 07:16:07 +10:00
• 5826e4d415 Adding more operating systems to extrac32.exe (#387) TAbdiukov 2024-08-18 07:10:48 +10:00
• e09cf1066f Add Diantz directives/DDF entry to diantz.exe (#390) TAbdiukov 2024-08-18 07:02:55 +10:00
• e1d0707082 Allow tildes (~) in URLs (#391) TAbdiukov 2024-08-18 06:38:18 +10:00
• 74ffaa534f Add Ngen.exe (#357) Avihay Eldad 2024-07-15 22:59:23 +03:00
• da4f6e5407 Update Msdeploy.yml and add copy utility (#354) Avihay Eldad 2024-07-15 22:53:17 +03:00
• 70268a5a9f fix parameter typo for squirrel.exe (#383) Nathan 2024-07-12 19:49:30 +02:00
• 03b527b105 Update wsl.exe description (#378) unrooted 2024-06-07 00:42:25 +02:00
• 35148cc39e Add Visio.exe as a downloader (#356) Avihay Eldad 2024-06-06 01:50:25 +03:00
• 622aaeed54 Add Powershell.exe to Honorable Mentions (#363) bohops 2024-06-05 18:17:34 -04:00
• 5d80e48159 Correct Winget.yml Spelling (#379) Dr. Gerald Yaya 2024-06-03 17:52:55 +01:00
• 78fa7b550e Add Winfile.yml (#374) Avihay Eldad 2024-05-23 02:02:56 +03:00
• 2185ade1f2 Update Msiexec.yml (#369) Borja 2024-05-22 19:59:51 +02:00
• 91a3e80d8f Update Csc.yml (#376) Mozhar Alhosni 2024-05-23 01:55:40 +08:00
• 5d7ec48f4f Update Msiexec.yml (#377) Lino 2024-05-20 22:49:27 +02:00
• 2cc0ee99e6 Applying MITRE ATT&CK v15 changes (#370) Wietze 2024-04-24 15:10:59 +01:00
• 2cc01b0113 Add Detection Sigma ref (#368) frack113 2024-04-19 19:53:37 +02:00
• fc23c999e6 Create wbadmin (#364) irEasty 2024-04-05 19:38:21 +01:00
• aea7bd082d Add Winproj.exe as a downloader (#351) Avihay Eldad 2024-04-05 21:19:49 +03:00
• 3c826ab1ca Add MSAccess as a new downloader (#288) C-h4ck-0 2024-04-06 01:18:57 +07:00
• ebbf08ec4d Adding tags (closes #9, #318) (#362) Wietze 2024-04-03 16:53:36 +01:00
• a945bac6be Create Appcert.yml (#361) Avihay Eldad 2024-03-31 20:56:11 +03:00
• 33b9574d04 Update Tar.yml (#310) Avesta 2024-03-31 15:00:57 +02:00
• 65e05aa4d6 Update Te.yml (#359) Avihay Eldad 2024-03-31 15:43:00 +03:00
• 3aa721515b Fix typo in /z command parameter (#360) Axel Boesenach 2024-03-23 12:13:30 +01:00
• 23bf33c7c4 Update MITRE T1185 to T1105 (#345) j00c3 2024-02-17 11:30:52 -06:00
• ce53e1376a Moved text to correct line (#349) Bjarne 2024-02-17 18:14:08 +01:00
• bba87a6c2a TypoFix: Addinutil.yml (#342) Lino 2024-02-13 14:37:40 +01:00
• 80267d91dd Adding GitHub Actions workflow test for duplicate filenames (#340) Wietze 2023-11-08 01:55:24 +00:00