meditology Goto Github PK

inveighzero

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

invoke-psimage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

invoke-vnc

Powershell VNC injector

invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

javaunserializeexploits

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

junk

kali-setup-script

Bash script which prepares Kali for a pentest by enabling session logging, installing tools, and making common configuration changes

lapsdumper

https://www.n00py.io/2020/12/dumping-laps-passwords-from-linux/

lazagne

Credentials recovery project

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

luhn-calculator

A very simple Burp extension to make it easier to enumerate credit cards in the Intruder.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

maliciousmacromsbuild

Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

mandiant-azure-ad-investigator

manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

microburst

A collection of scripts for assessing Microsoft Azure security

microsoft365_devicephish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

mimikatz

A little tool to play with Windows security

mimikore

.NET 5 Single file Application

mitm6

pwning IPv4 via IPv6

monkey

Infection Monkey - An automated pentest tool

ms17-010-scanner

msf-autoshell

Feed the tool a .nessus file and it will automatically get you MSF shell

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

netripper

NetRipper - Smart traffic sniffing for penetration testers

networkserviceexploit

POC for NetworkService PrivEsc

nmap-parser

Parses Nmap XML files