tmp63498 Goto Github PK

lestat

Check robustness of your (their) Active Directory accounts passwords

linkfinder

A python script that finds endpoints in JavaScript files

littlecorporal

LittleCorporal: A C# Automated Maldoc Generator

mail-spoofer

A proof of concept email spoofing tool built on Docker.

malicious-pdf

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

microsoftwontfixlist

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

mimikatz

A little tool to play with Windows security

mimikore

.NET 5 Single file Application

minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

multipotato

netntlmtosilverticket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

nimhollow

Nim implementation of Process Hollowing using syscalls

ntlm-scanner

A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities

ntlmrecon

Enumerate information from NTLM authentication enabled web endpoints 🔎

ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

office-phish-templates

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

pdfjs

PowerShell to generate PDFs useful in phishing or client side attacks

pdlist

A passive subdomain finder

penetration-testing-tools

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

pentest-notes

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

pentest-tools

Custom pentesting tools

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

phishery

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

powerline

powershell-suite

My musings with PowerShell

pret

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

printnightmare