seemantbisht Goto Github PK

adaclscanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

asreproast

Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

aws-waf-security-automation

Amazon WAF Security Automation deployment (modular with Terraform)

bta

Open source Active Directory security audit framework.

c2-saas

caldera

An automated adversary emulation system

cascade-server

CASCADE Server

cheats

Various Cheat Sheets

commercial

credking

Password spraying using AWS Lambda for IP rotation

csharpscripts

Collection of C# scripts

dacl-and-sacl

damp

The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification

deathstar

Automate getting Domain Admin using Empire (https://github.com/EmpireProject/Empire)

demiguise

HTA encryption tool for RedTeams

domaincheck

DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

goddi

goddi (go dump domain info) dumps Active Directory domain information

gofetch

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

honeypotbuster

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

kerberoast

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

oshardening

OS Hardening scripts for multiple linux based operating systems. Keep in mind this is the minimum!

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server