ericchauvette Goto Github PK

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

amsiscanbufferbypass

Bypass AMSI by patching AmsiScanBuffer

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bloodhound-tools

Collection of tools that reflect the network dimension into Bloodhound's data

bloodhoundad-queries

cheatsheet

This is a simple Cheat Sheet which can be helpful while pentesting

community-threats

The largest, public library of adversary emulation plans in JSON. A place to share custom SCYTHE threats with the community. #ThreatThursday

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexec

A swiss army knife for pentesting networks

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

dettect

Detect Tactics, Techniques & Combat Threats

donpapi

Dumping DPAPI credz remotely

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

esp8266_deauther

Affordable WiFi hacking platform for testing and learning

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

goad

game of active directory

gobuster

Directory/File, DNS and VHost busting tool written in Go

haxxdetector

A WiFi Nugget sketch to detect WiFi Haxx

hcxdumptool

Small tool to capture packets from wlan devices.

installerfiletakeover

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

mitmf

Framework for Man-In-The-Middle attacks

monkey

Infection Monkey - An automated pentest tool

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

nzyme

Nzyme is a free and open next-generation WiFi defense system. Go to www.nzyme.org for more information.