relkci Goto Github PK

arcusplatform

asset-discovery

Burp Suite extension to discover assets from HTTP response.

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

beaker

Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

certbad

cf-worker-header-injector

Cloudflare Worker to Inject Headers into HTTP Responses

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

domainbuildscripts

Build a domain with three quick PowerShell scripts!

dpat

Domain Password Audit Tool for Pentesters

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

f2bdistro

Fail2Ban Distributed Bans via SSHFS

gplinkreport

ha-smartthinq-sensors

HomeAssistant custom integration for SmartThinQ LG devices configurable with Lovelace User Interface.

netcease

nightowl-wificamera-config-wnip2

WIFI configuration and ONVIF information for Nightowl WNIP2 series cameras

nightowlsp-wnip2-vulns

onvif-device-manager

mirror of http://sourceforge.net/projects/onvifdm/

pfsense-zabbix-template

Zabbix Template for pfSense

pgp-kentickler

PGP Key for Kent Ickler

pipal

Pipal, THE password analyser

plumhound

Bloodhound for Blue and Purple Teams

powermeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

powershell_netbiosdisable

Script to disable NetBios for TCP/IP on Network Interfaces

roadtools

The Azure AD exploration framework.

sharpsphere

.NET Project for Attacking vCenter

shields

Concise, consistent, and legible badges in SVG and raster format

sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

streamdeck-hubitat

Hubitat integration for the Elgato Stream Deck

tools

Somes tools and scripts