crash0ver1d3 Goto Github PK

ad-honeypot-autodeploy

Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically.

apollo

A .NET Framework 4.0 Windows Agent

awesome-flipperzero

🐬 A collection of awesome resources for the Flipper Zero device.

c-sharp-memory-injection

A set of scripts that demonstrate how to perform memory injection in C#

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

clamavscan

Utilizing ClamAV, automatically scan USB drive for virus or malware, once mounted to a Raspberry Pi, or Linux device.

css-exchange

Exchange Server support tools and scripts

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

defendercheck

Identifies the bytes that Microsoft Defender flags on.

dnspy

.NET debugger and assembly editor

do-lab

domain-seek-and-remove-files

Powershell framework to find and remove files by name on Windows Active Directory domain. This script was built with purpose to cleanup vulnerable exe and utilities by name across a domain.

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

force-reset-laps

Powershell script to force reset LAPS passwords across a domain by specifiying an OU or OU's. New values update at next Group Policy Enforcement.

get-localmembership-domain

Powershell script to query local group membership on domain joined computers. Great for identifying a baseline, maintenance, and Incident Response.

hash-huntress

PowerShell framework to detect the existence of files matching SHA-256 hashes provided to the framework, located in file path(s) provided to the framework, using WindowsRM. This tool was built to be a flexible framework that can be tailored to fit many situations.

hostrecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

invoke-obfuscation

PowerShell Obfuscator

mass_triage_tools

Mass Triage Tools

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

microsoftactivedirectorymodule

MicrosoftActiveDirectory Powershell Module

mitigate

Machine Interrogation To Identify Gaps & Techniques for Execution

mitre-assistant

A more flexible & useful att&ck client

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

onedrive_user_enum

pentest tool to enumerate valid onedrive users

perform-resetnotify

Incident Response tool to reset a user or user(s) password, and send a notification email to the manager listed in AD, as well as helpdesk, and any other parties. A second email is sent, to manager, and same audience, using Office Message Encryption, with the password for first logon.

powerstrip

presentations

Slide decks from presentations

psnmap

Svendsen Tech's PowerShell nmap-like port scanner accepting IPv4 CIDR notation

redsails

RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk: https://www.youtube.com/watch?v=Ul8uPvlOsug