xalten Goto Github PK

365inspect

A PowerShell script that automates the security assessment of Microsoft 365 environments.

adfspoof

aquatone

A Tool for Domain Flyovers

awesome-list

Cybersecurity oriented awesome list

awsmbloodhoundcustomqueries

Collection of cyphers for bloodhound

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

bitb

Browser In The Browser (BITB) Templates

bloodhound

Six Degrees of Domain Admin

bloodhound-tools

Collection of tools that reflect the network dimension into Bloodhound's data

cve-2019-1040-scanner

dfscoerce

dfscoerce-exe-2

DFSCoerce exe revisited version with custom authentication

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

evilgophish

evilginx2 + gophish

evilrdp

ffuf

Fast web fuzzer written in Go

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

go-dork

The fastest dork scanner written in Go.

goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

koadic

zerosum0x0's Koadic

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

localpotato

manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

moriarty

mosint

An automated e-mail OSINT tool

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.