ipc-security Goto Github PK

ip-rotate

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

ipc-prowler

Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

jenkinspasswordspray

A tool to password spray Jenkins instances

kali_setup

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

msportals.io

Microsoft Administrator Sites

msprobe

Finding all things on-prem Microsoft for password spraying and enumeration.

mubeng

An incredibly fast proxy checker & IP rotator with ease.

nim_dinvoke

D/Invoke implementation in Nim

nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

ntlmrecon

Enumerate information from NTLM authentication enabled web endpoints 🔎

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-burp-plugin

Nuclei plugin for BurpSuite

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

o365-bitb

o365creeper

Python script that performs email address validation against Office 365 without submitting login attempts.

obfuscation-stuff

Source Code Obfuscation And Binary Obfuscation, Multiple Languages And Multiple Platforms. Including 250+ Tools and 600+ Posts

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

offensivenotion

Notion as a platform for offensive operations

oh365userfinder

Python3 o365 User Enumeration Tool

onelistforall

Rockyou for web fuzzing

openvpn-install

OpenVPN road warrior installer for Debian, Ubuntu and CentOS

owabrute

Hydra wrapper for bruteforcing Microsoft Outlook Web Application.

pagodo

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pe-bear

Portable Executable reversing tool with a friendly GUI