badchars Goto Github PK

linux-exploit-suggester

Linux privilege escalation auditing tool

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

lpeworkshop-1

Windows / Linux Local Privilege Escalation Workshop

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

mimikatz

A little tool to play with Windows security

minio

High Performance, Kubernetes Native Object Storage

msf-venom-cheatsheet

Single Page Cheatsheet for common MSF Venom One Liners

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

nmapper

nMapper is an automated penetration testing tool. (speech recognition included!)

ntlmrelaytoews

ntlm relay attack to Exchange Web Services

ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

officepurge

osce-exploit-dev

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

pentest-notes

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

phantom-evasion

Python antivirus evasion tool

pmapper

A tool for quickly evaluating IAM permissions in AWS.

powerless

Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

powerup

This version of PowerUp is now unsupported. See https://github.com/Veil-Framework/PowerTools/tree/master/PowerUp for the most current version.

prysm

Go implementation of Ethereum proof of stake

psych-kicks.github.io

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

redteam

Tools & Interesting Things for RedTeam Ops

reverseshell_cheatsheet

revshellgen

Simple script to generate commands to achieve reverse shells.

s3-inspector

Tool to check AWS S3 bucket permissions

s3scanner

Scan for open AWS S3 buckets and dump the contents

scoutsuite

Multi-Cloud Security Auditing Tool

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

slither

Static Analyzer for Solidity