nick0lass Goto Github PK

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adcskiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

adeleginator

A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory

amsi-bypass

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

bloodhound.py

A Python based ingestor for BloodHound

bofhound

Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

com-hunter

COM Hijacking VOODOO

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

helper-scripts

Repo of some helper scripts to try and make lives easier

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

moreimpacketexamples

More examples using the Impacket library designed for learning purposes.

network-tools

Collection of network tools and scripts

nmap-did-what

Nmap Dashboard Mini Project

ohmyzsh

🙃 A delightful community-driven (with 2,300+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

pentest

:no_entry: offsec batteries included

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

pkinittools

Tools for Kerberos PKINIT and relaying to AD CS

powerzure

PowerShell framework to assess Azure security

requestaadrefreshtoken

responder-parser

Most Responder's configuration power in your hand.

supernova

Real fucking shellcode encryptor & obfuscator tool

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

teamsimplant

tools

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

witnessme

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

wmi-shell

WMI Shell project : proof-of-concept of remote access to a Windows machine using only the WMI service.