sec13b Goto Github PK

ad-assessmentkit

Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

ad_enumeration_hunt

add-new-wordpress-admin

Add A New WordPress Admin POC 2024

am0n-eye

apt-backpack

cve-2019-11510, cve-2019-19781, cve-2020-5902,               cve-2021-1497, cve-2021-20090, cve-2021-22006, cve-2021-22205, cve-2021-26084, cve-2021-26855, cve-2021-26857, cve-2021–26857, cve-2021–26858, cve-2021–26865

auto-ovpn

This is an auto-generated list of Open VPN config files.

auto-rdp-cracker

an auto RDP Cracker On Python3 Based on Hydra THC

autonuke_no_post

autozerologon

Zerologon自动化脚本

b3_conti

A crappy batch file to simulate a human operator doing on box enum (windows) via cmd exec

backup_dc_registry

A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY

blacklistip

blacklotus

BlackLotus UEFI Windows Bootkit

bofryptor

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

breakingwindows

Another pentest of a vulnerable windows server

brutedum

BruteDum - Brute Force attacks SSH, FTP, Telnet, PostgreSQL, RDP, VNC with Hydra, Medusa and Ncrack

bruteratel-1.2.2-scandinavian-defense

capstone-project

This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR products using techniques that negate or circumvent detection techniques used by these products.

cidr-to-ip-export-list

Subnet host range list creator

clean

cme-ms17-010-module

Fixed ms17-010 module for Crackmapexec

cmstplua-uac-bypass

Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.

cobalt-strike-aggressor-scripts

123

coercedpotato

country-ip-blocks

CIDR country-level IP data, straight from the Regional Internet Registries, updated hourly. This is a read-only mirror.

crackmapexec

A swiss army knife for pentesting networks

crackmapexec-commands

crackrdp

Bash script to crack rdp with THC-Hydra