cyberarch-consulting Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

android_hid

Use Android as Rubber Ducky against another Android device

autordpwn

The Shadow Attack Framework

avillaforensics

Avilla Forensics 3.0

chaos

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

clipboardme

Grab and Inject clipboard content by link

cloud-security-remediation-guides

Security Remediation Guides

cloudsploit

Cloud Security Posture Management (CSPM)

cloudtopolis

Zero Infrastructure Password Cracking

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cset

Cybersecurity Evaluation Tool

dalfox

🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

godpotato

grype

A vulnerability scanner for container images and filesystems

havoc

The Havoc Framework.

inql

InQL - A Burp Extension for GraphQL Security Testing

invoke-obfuscation

PowerShell Obfuscator

kaiten

A Undetectable Payload Generation

kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

mythic

A collaborative, multi-platform, red teaming framework

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).