acknowledgehim Goto Github PK

pypsrp

PowerShell Remoting Protocol for Python

randomrepo

Repo for random stuff

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rubeus

Trying to tame the three-headed dog.

rvmi-rekall

Rekall Forensics and Incident Response Framework with rVMI extensions

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scoutsuite

Multi-Cloud Security Auditing Tool

scripts-tools-shells

seth

Perform a MitM attack and extract clear text credentials from RDP connections

shinai-fi

Docker images for learning wifi hacking

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

singularity

A DNS rebinding attack framework.

spookflare

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient.

sqlmate

A friend of SQLmap which will do what you always expected from SQLmap.

subdomino

An application that enumerates subdomains, and scan them with several rules

tekium-pan-hunter-script

Easy search of possible PAN's for Windows and Linux systems.

thc-ipv6

the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

try000001

Dead Simple o365 Credential Spraying

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

win-master

A python script file to remotely analyse and exploit Microsoft Windows system via impacket.

windapsearch

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries

wordpresscan

WPScan rewritten in Python + some WPSeku ideas

xip

XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.

xsssniper

An automatic XSS discovery tool

xsstrike

Most advanced XSS detection suite.

zerotier_lan_access

For when you just need full access to that remote LAN