x746b Goto Github PK

ad-powershell

ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

amsi_bypass_in_2023

Amsi Bypass payload that works on Windwos 11

arm-emulator

Simple ARM machine code disassembler and emulator

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

bloodhound-pki

Fork of BloodHound with PKI nodes and edges for Certipy along with some minor personal improvements

command-injection-payload-list

🎯 Command Injection Payload List

crypto-attacks

Python implementations of cryptographic attacks and utilities.

cve-2021-44731-snap-confine-suid

Local Privilege Escalation Exploit for CVE-2021-44731

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

dfscoerce

dnscat-decoder

encodedpshtooling

A Collection of encoded powershell tools. All encoding done via Chimera

fakessh

A dockerized fake SSH server honeypot written in Go that logs login attempts.

hash-buster

Crack hashes in seconds.

keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

keytabextract

Extracts Key Values from .keytab files

mongomap

A tool inspired by sqlmap specifically for MongoDB Injection

nthw

Not The Hidden Wiki - The largest repository of links related to cybersecurity

oneshot

Run WPS PIN attacks (Pixie Dust, online bruteforce, PIN prediction) without monitor mode with the wpa_supplicant

passthecert

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

privesccheck

Privilege Escalation Enumeration Script for Windows

privfu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

pth-toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

pwn_jenkins

Notes about attacking Jenkins servers

pwncat

Fancy reverse and bind shell handler

rbcd-attack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

sharpevader

This is a python script which automatically generates metepreter tcp or https shellcode encodes it and slaps some Behavioural detection in a c# Project for you to build and run

sharpsccm

A C# utility for interacting with SCCM