lutzenfried Goto Github PK

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

abuseazureapipermissions

Abuse Azure API permissions for red teaming

activedirectory

Apuntes Pentesting a ActiveDirectory PentesterAcademy

admodule

Microsoft signed ActiveDirectory PowerShell module

apt_report

Interesting APT Report Collection And Some Special IOC

askingcreds

PowerShell script used to steal user/admin Windows password simply by asking the user

challenges

Security challenges

checkpointspray

clmbypassblogpost

This code was used for the blogpost on secjuice.

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

delegate

Tool to perform GCP Domain Wide Delegation abuse and access Gmail and Drive data

docker-remote-api-exploit

Docker-Remote-API-Exploit

keepasshijack

Simple python script to hijack keepass on Windows host

keepasssender

PowerShell script used to steal keepass database in cleartext using key shortcut if database is unlock

methodology

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

ntlm_downloader

PowerShell script used to download file through NTLM proxy

offensivecloud

Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)

osce3-complete-guide

OSWE, OSEP, OSED, OSEE

pentips

Penetration testing tips

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

python

querieshound

BloodHound Custom Cypher queries

recon-ad

Recon-AD, an AD recon tool based on ADSI and reflective DLL’s

rfi_foot_printing

PHP script used to achieve some recon on webserver when RFI vulnerability is detected

security-research

Exploits written by the Rhino Security Labs team

snmbrute3

Python script used for offline brute force SNMP V3

sublocal

Simple multi-thread wordlist based sub domain brute force using socket python library

webapppentest

zipcracker

Python script for brute force attack on password ZIP file protected