justinforbes Goto Github PK

go-pst

A library for reading PST files (written in Go/Golang).

goad

game of active directory

golconda

goldencopy

Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.

goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

gophish

Open-Source Phishing Toolkit

goward

A robust Red Team proxy written in Go.

gpowned

Buggy script to play with GPOs

gpozaurr

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

grouper2

Find vulnerabilities in AD Group Policy

haptyc

hardcidr

hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.

hardwareallthethings

Hardware/IOT Pentesting Wiki

harvis

Harvis is designed to automate your C2 Infrastructure.

hashcat-rule

Rule for hashcat or john. Aiming to crack how people generate their password

hashcathelper

Convenience tool for hashcat

hashview

A web front-end for password cracking and analytics

hat

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

havoc

The Havoc Framework

hawk

Network, recon and offensive-security tool for Linux.

hazprone

HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enabling you to pentest Vulnerabilities within, and hence, gain a better understanding of what could go wrong and why!!

hcxtools

Portable (that doesn't include proprietary/commercial operating systems) solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = convert and calculate candidates, x = different hashtypes

heaptrace

helps visualize heap operations for pwn and debugging

hellsgate

Original C Implementation of the Hell's Gate VX Technique

houdini

Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.

houndsploit

An advanced graphical search engine for Exploit-DB

how-to-exploit-a-double-free

How to exploit a double free vulnerability in 2021. 'Use After Free for Dummies'

huan

Encrypted PE Loader Generator

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment