0xapt Goto Github PK

amsibypass

app-password-persistence

Using Microsoft 365 App Passwords for persistence

av-evasion

Anti Virus evasion techniques

awesome-bbht

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.

awesome-cloud-pentest

awesome-malware-development

Organized list of my malware development resources

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bug-bounty

Ressources for bug bounty hunting

bug-bounty-wordlists

cve-2021-1675

C# and Impacket implementation of CVE-2021-1675/PrintNightmare

cve-2021-1676

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

evil-xmlrpc

evil-xmlrpc is a tool that I created to help me bruteforce Wordpress user accounts using xmlrpc.php while bypassing iThemes Security preventing lockouts

hacker-roadmap

:pushpin: Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

hacktricks

hivenightmare-checker

A PowerShell script that checks for dangerous ACLs on system hives and shadows

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11

leetlinked

A Google/Bing Scraping tool for LinkedIn

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

microsoft-activation-scripts

A Windows and Office activator using HWID / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

mimikatzfud

msfmania

Python AV Evasion Tools

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

osce-prep

A list of freely available resources that can be used as a prerequisite before taking OSCE.

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

powershellforpentesters

Course repository for PowerShell for Pentesters Course

printnightmare

pssw100avb

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

pwndb

Search for leaked credentials

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

security

AD-Attack-Defense