meditology Goto Github PK

bluekeep

Proof of concept for CVE-2019-0708

bluekeep-scanner

BlueKeep powershell scanner (based on c# code)

bridgekeeper

Scrape employee names from search engine LinkedIn profiles. Convert employee names to a specified username format.

burp-password-spray

This extension allows a user to specify a lockout policy in order to automate a password spray attack via Intruder.

caldera

Scalable Automated Adversary Emulation Platform

certify

Active Directory certificate abuse.

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cheatsheets

Cheat sheets for various projects.

cia-hacking-tools

WikiLeaks Vault 7 CIA Hacking Tools

cloud-security-remediation-guides

Security Remediation Guides

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudsploit

Cloud Security Posture Management (CSPM)

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

cobalt-strike-cheatsheet

Some notes and examples for cobalt strike's functionality

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

convert-invoke-kerberoast

Converts the output from Invoke-Kerberoast into hashcat format.

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

credking

Password spraying using AWS Lambda for IP rotation

creds

Some usefull Scripts and Executables for Pentest & Forensics

cve-2019-1040-scanner

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2020-1472

Test tool for CVE-2020-1472

cve-repository

:beetle: Repository of CVE found by OCD people

cypass.cna

Cylance LSASS Bypass

daft

DAFT: Database Audit Framework & Toolkit

dark-web-osint-tools

OSINT Tools for the Dark Web

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

det

(extensible) Data Exfiltration Toolkit (DET)

dirsearch

Web path scanner

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!