w9hax Goto Github PK

kerberos_windows_scripts

Collection of scripts for interacting with AD Kerberos from Linux

ldapper

AD LDAP Command Line Searching that doesn't suck.

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

nishang

Nishang - PowerShell for penetration testing and offensive security.

not-paid

Client did not pay? Add opacity to the body tag and increase it every day until their site completely fades away

ntlmv1-multi

NTLMv1 Multitool

o365recon

retrieve information via O365 with a valid cred

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

openvpn-monitor

A monitor script to alert when remote OpenVPN devices come up.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

passphrase-wordlist

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

proxycannon-ng

A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

rta

scripts

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

serpico

SimplE RePort wrIting and COllaboration tool

sinatra-boilerplate

Sinatra, Zurb Foundation, Guard, Slim, Compass, RSpec, Capybarra... All the bling ready to go!

sneaky_gophish

Hiding GoPhish from the boys in blue

spookflare

Meterpreter loader generator with multiple features for bypassing client-side and network-side countermeasures.

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

vcr

Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.

wfuzz

Fork of original wfuzz in order to keep it in Git

wsdler

WSDL Parser extension for Burp