ffcommax Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

amsi_hooking_files

bloodhound.py

A Python based ingestor for BloodHound

bluekeep-scanner

BlueKeep powershell scanner (based on c# code)

bruteforce-lists

Some files for bruteforcing certain things.

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexecwin

CrackMapExec v5.1.0 compiled for Windows

cve-2019-0604

cve-2019-0604 SharePoint RCE exploit

cve-2019-1040-scanner

cve-2019-11510

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

cve-2020-0688

Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

dotnetcompressor

Compresses .NET executables and merges dlls into a standalone, smaller executable.

dumpdumpi

dumpdumpi

evil-winrm

The ultimate WinRM shell for hacking/pentesting

f-uac

F-UAC

fakelogonscreen

Fake Windows logon screen to steal passwords

healthchecker

Exchange Server Performance Health Checker Script

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

interestingpic

Interesting pictures Cybersecurity

invoke-socksproxy

Socks proxy server using powershell. Supports local and reverse connections for pivoting.

ispy

ispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )

ligolo

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

lockphish

Lockphish is a tool for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode[No longer works on latest devices]

myplist

MyPList

net-gpppassword

.NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pivotnacci

A tool to make socks connections through HTTP agents

plumhound

Bloodhound for Blue and Purple Teams