nmbshiva Goto Github PK

amsipebwalkvba

Walking the PEB in VBA

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

cplresourcerunner

Run shellcode from resource

crackmapexec

A swiss army knife for pentesting networks

cve-2021-36934

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

demofiles

Demo and test files

dirbust

itwasalladream

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

nmbshiva.github.io

website of numbshiva

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

privesccheck

Privilege Escalation Enumeration Script for Windows

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

scripts

Scripts written for pentesting all the things

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

syscallamsiscanbufferbypass

AmsiScanBufferBypass using D/Invoke

syswhispers

AV/EDR evasion via direct system calls.

threatcrowd

Query the threatcrowd api to get domain names

undefender

Killing your preferred antimalware by abusing native symbolic links and NT paths.

wordlists

yea. uh. wordlists.

xss-payloads

List of XSS Vectors/Payloads