nyxgeek Goto Github PK

azuread_autologon_brute

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

bad_guest

bashscan

simple bash portscanner using nc

classic_hacking_tools

archive of classic hack tools < 2000

cloudkicker

[redacted]

cmsmap

cve-2019-3980

domain

forked from jhaddix/domain enum script, changed for Mac OS X

dumpsniffer

tools for analyzing strings from password lists

enum4linux

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

evil_oauth2_app

Creating an Evil OAuth2 application with PHP

exploits

my public exploit code

f5-cookie-monster

give it a url, will decode f5 cookies to reveal internal IPs

graphninja

guestlist

tool for identifying guest relationships between companies

gurbalib

an lpmud mudlib for the dgd driver

h4x0rsearch

list of domains that are included in h4x0rsearch.com

hashcat

World's fastest and most advanced password recovery utility

imgdevil

quick and dirty proof-of-concept to hide shells in images

jtr-to-hashcat

Converts NETNTLM hashes in JtR format and converts them into the format hashcat uses.

ldapper

LDAP Querying without the Suck

lyncsmash

locate and attack Lync/Skype for Business

medusa

Medusa is a speedy, parallel, and modular, login brute-forcer.

ntlmscan

scan for NTLM directories

nyxgeek-readinglist

hacker folklore, history, and culture

nyxgeek-rules

Custom password cracking rules for Hashcat and John the Ripper

nyxgeek-slides

slide decks etc

nyxgeek-wordlists

wordlists for password cracking

o365recon

retrieve information via O365 and AzureAD with a valid cred

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users