leprkhn Goto Github PK

air-hammer

atom-bombing

Brand New Code Injection for Windows

awesome-windows-exploitation

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

bloodhound

Six Degrees of Domain Admin

brut3k1t

Brute-force (dictionary attack, jk) attack that supports multiple protocols and services

datasploit

A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.

davscan

Fingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.

dirtycow.github.io

Dirty COW

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

ducky

rubber ducky scripts

edxnode-csvtojson

exploit

exploitpack

Exploit Pack - Project

exploits

Miscellaneous exploit code

findsploit

Find exploits in local and online databases instantly

http-over-protocol

HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy

iotseeker

Created by Jin Qian via the GitHub Connector

linux-exploit-development-tutorial

a series tutorial for linux exploit development to newbie.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

metasploit-payloads

Unified repository for different Metasploit Framework payloads

osint_tools_security_auditing

osint_tools_security_auditing

penetration-testing-tools

Penetration Testing tools - one repo to clone them all... containing latest pen testing tools

powershell-suite

My musings with PowerShell

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

privesc

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

pwndsh

Post-exploitation framework (and an interactive shell) developed in Bash shell scripting

rottenpotato

RottenPotato local privilege escalation from service account to SYSTEM

ruler

A tool to abuse Exchange services

shellfire

Exploitation shell for exploiting LFI, RFI, and command injection vulnerabilities

ssh-audit

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)