natehenn Goto Github PK

aspx-reverse-shell

Aspx reverse shell

atomic-red-team

Small and highly portable detection tests.

awx

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

check_mdi

Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.

concierge

Repo for Concierge AI dev work

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

funwithofficemacros

Companion content for my 'Fun with Office Macros' webcast.

gomapenum

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

locksmith

A small tool built to detect and fix common misconfigurations in Active Directory Certificate Services.

mail-spoofer

A proof of concept email spoofing tool built on Docker.

mailspoofsent

Mailspoofsent is a Bash script that sends an email using the smtp.mailfrom and header.from addresses specified by the user. It also changes some configuration values that are required to spoof email bypassing spam filters.

meioc

Extracting IoC data from eMail

mhydeath

Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.

misconfiguration-manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

nanodump

The swiss army knife of LSASS dumping

netexec

The Network Execution Tool

nikto

Nikto web server scanner

nimplant

A light-weight first-stage C2 implant written in Nim.

pentestgpt

A GPT-empowered penetration testing tool

powershellforinfosec

pxethief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

pyfud

fully Undetectable payload generator for metasploit

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

ritm

Roast in the Middle

sccmhunter

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

trufflehog

Find credentials all over the place