thesubtlety Goto Github PK

.tmux

🇫🇷 Oh My Tmux! Pretty & versatile tmux configuration made with ❤️ (imho the best tmux configuration that just works)

389-ds-password-check

Utilities for generating and checking passwords against 389-ds pbkdf2_sha256 hashes (now supported by Hashcat)

adaudit

Powershell script to do domain auditing automation

aem-hacker

aftershock

A toolkit leveraging Terraform to get info from SaaS providers or create SaaS resources. Post Exploitation.

aggressor-scripts

Aggressor scripts I've made for Cobalt Strike

airstripmap

A map of public airports based on state airport directories.

aquatone

A Tool for Domain Flyovers

atlassian-oauth-phisher

Got an Atlassian OAuth app for JIRA or Confluence? What happens if someone authorizes the app?

awesome-iam

👤 Identity and Access Management Knowledge for Cloud Platforms

aws-iams-by-service-permission

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

bh-go

BlackHat Go Exercises

bhg

Code samples for No Starch Press Black Hat Go

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

collage_maker

Picture collage maker in Python

cplresourcerunner

Run shellcode from resource

csharpscripts

Collection of C# scripts

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

empire

Empire is a PowerShell and Python post-exploitation agent.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

go-acl

Go library for manipulating ACLs on Windows

go-decrypt-jenkins

Simple tool to decrypt Jenkins encrypted strings

go-mimikatz

A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.

go-serve-with-upload

Simple go file server with upload and basic auth

goalloworgs

A Golang tool to whitelist ASN's based on organization name

goshin

A basic pseudo shell for command injection

hashcat

World's fastest and most advanced password recovery utility