the-viper-one Goto Github PK

activedirectoryattacktool

ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is is best utilized using a set of known credentials against the host.

convertto-nt

Uses PowerShell to convert a given string to its NT hash equivalent.

create-bloodhound-graph

HTML file that utilises vis.js to create bespoke bloodhound graphs.

creds

Some usefull Scripts and Executables for Pentest & Forensics

dcsync-to-hashcat

Performs DCSync, extracts all hashes in a Hashcat friendly format

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

encryptedcompiledbinaries

For private use :)

hashcat-6.2.6-sccm

hashcat fork with SCCM hash support

invoke-domaindictionary

Parses information from the Current or specified Domain into a dictionary file to be used for password cracking

invoke-ipmidump

PowerShell IPMI Password Hash Dumper

invoke-powerincrease

PowerShell port of SharpIncrease. Inflates binary files to aid in AV evasion

invoke-powerstrings

Extract strings from binary files with PowerShell

invoke-smbremoting

Interactive Shell and Command Execution over Named-Pipes (SMB)

invoke-vncauth

PowerShell script to enumerate for and identify VNC servers that do not require authentication. Supports Active Directory target acquisition and CIDR notations.

localaccountbruteforce

Simple PowerShell script to Bruteforce local accounts.

pentest-everything

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

pentest-tools

pme-scripts

powersharppack

psmapexec

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

rdpassspray

Python3 tool to perform password spraying using RDP

redteam-pentest-tools

rubeustoccache

A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket

simple-amsi-bypass

snmp-scan

PowerShell script to enumerate for and authenticate to SNMP servers.

vnc-hunt

PowerShell script that hunts for local VNC encrypted passwords and decrypts them

wmiexec

Execute Windows commands remotely and capture output using only WMI and PowerShell (not remoting).