mdfarhan Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aggressor-vysec

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

bash-dev-tcp

collection of scripts using /dev/tcp

canibespoofed

CanIBeSpoofed is a console project utilising functionality built for the https://caniphish.com/free-phishing-tools/email-spoofing-test website. This project facilitates scanning of domains to gain visibility over email supply chain and SPF/DMARC vulnerabilities.

checklists

Pentesting checklists for various engagements

codeexecutiononwindows

A list of ways to execute code on Windows using legitimate Windows tools

docker-sneaky-gophish

Docker for the latest gophish with stealth configuration from sneaky_gophish

drunkenkatz

a 'modified' version of the Invoke-Mimikatz.ps1 powershell script

evilginx2-phishlets

Evilginx2 Phishlets version (0.2.3) Only For Testing/Learning Purposes

evilgophish

evilginx2 + gophish

exploit

Exploits and advisories

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

goad

game of active directory

gophish-templates

GoPhish Templates that I have retired and/or templates I've recreated.

iker

An ike-scan wrapper to simplify penetration testing IKE and encourage stronger IKE implementations.

infosec_reference

An Information Security Reference That Doesn't Suck

kb

Respositoy of all my notes on infosec I have been building up over the years

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

mimikatz

A little tool to play with Windows security

nmap-nse-modules

My collection of nmap nse modules

osint_public

pacu

PACU - Phishing Automation & Campaigning Utility

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-tools

A collection of more than a 140+ tools, scripts, cheatsheets and other loots that I've developed over years for Penetration Testing and IT Security audits purposes. Most of them came handy at least once during my real-world engagements.

pentest-scripts

Github for the scripts utilised during Penetration test

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

phishingtemplates

phishious

An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.

phishsticks

A framework for OAuth 2.0 device code authentication grant flow phishing