dodiorne Goto Github PK

auto_osint

quick auto OSINT tool to bring together several other tools

bloodhound.py

A Python based ingestor for BloodHound

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

ccsrch

Cross-platform credit card (PAN) search tool for security assessments

certipy

Tool for Active Directory Certificate Services enumeration and abuse

cheatsheets

pentesting cheatsheet

cmespray

easy script to iterate through discovered usernames with a list of weak passwords

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

credential-dumping

This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential Access) with examples. There are multiple ways to perform the same tasks

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

deploy

used to deploy a new system

dfscoerce

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

john

Wordlists for creating statistically likely username lists for use in password attacks and security testing

jthon

lists

an assortment of lists for testing.

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

msdt-follina

Codebase to generate an msdt-follina payload

nxc

pentest_tools

A collection of misc pentesting tools

powersharppack

rockyou

shadowspray

A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

shcheck

A basic tool to check security headers of a website

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

stealth_shellcode_runners

tls_check

Bash script to check for weak ssl and tls versions and weak ciphers

uacme

Defeating Windows User Account Control