justinforbes Goto Github PK

spraycharles

Low and slow password spraying tool, designed to spray on an interval over a long period of time

sqliv

massive SQL injection vulnerability scanner

sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

sslh

Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)

stacs

Static Token And Credential Scanner

start-adenum

Tool that automates Active Directory enumeration

stfuedr

Silence EDRs by removing kernel callbacks

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud.

subdirectories-discover

Perfect wordlist for discovering directories and files on target site

subseven

SubSeven Legacy Official Source Code Repository

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

swego

Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

t.d.p

Using Thread Description To Hide Shellcode

table-top-with-teeth

TEST

talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

targetedkerberoast

Kerberoast with ACL abuse capabilities

tasmota

Alternative firmware for ESP8266 with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP, Serial or KNX. Full documentation at

teamsimplant

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

themole

Mole is an automatic SQL Injection exploitation tool. clone from sourceforge

thephish

ThePhish: an automated phishing email analysis tool

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

threatcheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

tht

Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science

tinycheck

TinyCheck allows you to easily capture network communications from a smartphone or any device which can be associated to a Wi-Fi access point in order to quickly analyze them. This can be used to check if any suspect or malicious communication is outgoing from a smartphone, by using heuristics or specific Indicators of Compromise (IoCs). In order to make it working, you need a computer with a Debian-like operating system and two Wi-Fi interfaces. The best choice is to use a Raspberry Pi (2+) a Wi-Fi dongle and a small touch screen. This tiny configuration (for less than $50) allows you to tap any Wi-Fi device, anywhere.

titanldr

Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.

tls-anvil

TLS-Anvil, a fully automated TLS testsuite for client and servers.

tokenstomp

C# implementation of the token privilege removal flaw discovered by @GabrielLandau/Elastic