herbsnspices001 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-pentesting

awesome-azure-pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

crackmapexec

A swiss army knife for pentesting networks

credslayer

Extract credentials and other useful info from network captures

crto

Certified Red Team Operator

ettercap

Ettercap Project

evil-winrm

The ultimate WinRM shell for hacking/pentesting

hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

mimidogz

Rewrite of Invoke-Mimikatz.ps1 to avoid AV detection

mitm6

pwning IPv4 via IPv6

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs.

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

pentesttools

Awesome Pentest Tools Collection

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.