empyrials Goto Github PK

awsome-pentesting

My cheatsheet notes to pentest AWS infrastructure

bitm

Beagle in the Middle

bitm-1

blue-merle

The blue-merle package enhances anonymity and reduces forensic traceability of the GL-E750 Mudi 4G mobile wi-fi router

check-localadminhash

Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of two of my favorite tools along with some of my own code. It utilizes Kevin Robertson's (@kevin_robertson) Invoke-TheHash project for the credential checking portion. Additionally, the script utilizes modules from PowerView by Will Schroeder (@harmj0y) and Matt Graeber (@mattifestation) to enumerate domain computers to find targets for testing admin access against.

clrvoyance

Managed assembly shellcode generation

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexec

A swiss army knife for pentesting networks

credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

dsinternals

DSInternals PowerShell Module and Framework

eavesarp

Analyze ARP requests to identify hosts that are communicating with one another.

edl

Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

ghidra

graphrunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

grassmarlin

Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

hidden-tear

an open source ransomware-like file crypter kit

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

https-github.com-blebson-dlink-camera-manager

impacket

Impacket is a collection of Python classes for working with network protocols.

invoke-commandas

Invoke Command As System/Interactive/GMSA/User on Local/Remote machine & returns PSObjects.

invoke-obfuscation

PowerShell Obfuscator

johntheripper

Jumbo patches for John the Ripper. The "bleeding-jumbo" branch (default) is based on 1.8.0-Jumbo-1. The "master" branch is just a copy of Solar's "john proper" CVS repo, a.k.a. non-Jumbo.

keethief

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

keys

repository for keys and key accessories

messagebox

PoC dlls for Task Scheduler COM Hijacking

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

mimipenguin

A tool to dump the login password from the current linux user

mirai-source-code

Leaked Mirai Source Code for Research/IoC Development Purposes