rootsecdev Goto Github PK

100dayshackerart

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

adfsbrute

A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

anti-virus-evading-payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineering, running code on target computers is part of most penetration tests. That means that you will need to be able to bypass antivirus software or other host-based protection for successful exploitation. The most effective way to avoid antivirus detection on your target's computers is to create your own customized backdoor. Here is a simple way to evade anti-virus software when creating backdoors!

at-ps

Adversary Tactics - PowerShell Training

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

azure-red-team

Azure Security Resources and Notes

azure_workshop

azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

badodf

Creates a malicious ODF document help leak NetNTLM Creds

badpods

A collection of manifests that will create pods with elevated privileges.

bitlocker-guidance

Configuration guidance for implementing BitLocker. #nsacyber

certipy

Python implementation for Active Directory certificate abuse

chromeos

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

cset

Cybersecurity Evaluation Tool

ctf-walkthrough

CTF Walkthrough

ctf_exploits

Various Custom Scripts for CTF's

cve-2020-0601

PoC for CVE-2020-0601

cve-2021-40444

CVE-2021-40444 PoC

cve-2023-46604

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

dfunc-bypasser

This tool is for letting you know how strong your disable_functions is and how you can bypass that.

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

entraidpasskeyhelper

PowerShell module to manage the Entra ID device-bound passkey feature

evilginx2-phishlets

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

family-of-client-ids-research

Research into Undocumented Behavior of Azure AD Refresh Tokens

fingerprintjs2

ghostpack

Complied .net Binaries for Ghostpack Tools