marshell88 Goto Github PK

charlotte

c++ fully undetected shellcode launcher ;)

checklists

Pentesting checklists for various engagements

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cknife

Cknife

copycat

crack_ssh

go写的协程版的ssh\redis\mongodb弱口令破解工具

crackmapexec

A swiss army knife for pentesting networks

credcrack

A fast and stealthy credential harvester

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

digital-signature-hijack

Binaries, PowerShell scripts and information about Digital Signature Hijacking.

dnssniffer

DNSQuery Sniffer in Golang

dzscan

Dzscan

empire

Empire is a PowerShell and Python post-exploitation agent.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exchangerelayx

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

f5_cookieleaks

Decode the cookies set by balancer F5, and disclousure all pool ip

go-sniffer

🔎Sniffing and parsing mysql,redis,http,mongodb etc protocol. 抓包截取项目中的数据库请求并解析成相应的语句。

icmp-backdoor

Backdoor that listens for specially crafted ICMP packets and spawns reverse shells.

invoke-obfuscation

PowerShell Obfuscator

invoke-phant0m

Windows Event Log Killer

invoke-socksproxy

Socks proxy server using powershell.

invoke-thehash

PowerShell Pass The Hash Utils

javaunserializeexploits

jenkins-cli-exploit

Jenkins CommonCollections Exploit

lazagne

Credentials recovery project

lightsocks

⚡️一个轻巧的网络混淆代理🌏

list-rdp-connections-history

Use powershell to list the RDP Connections History of logged-in users or all users

localnetworkscanner

PoC Javascript that scans your local network when you open a webpage

mimikatz

A little tool to play with Windows security

mimipenguin

A tool to dump the login password from the current linux user