meditology Goto Github PK

nmap-scripts

A collection of Nmap NSE scripts that I made.

ntdsaudit

An Active Directory audit utility

ntlminjector

In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)

o365enum

Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.

o365spray

Username enumeration and password spraying tool aimed at Microsoft O365.

obf-cats

Obfuscated Invoke-Mimikatz script

odat

ODAT: Oracle Database Attacking Tool

offensivecsharp

Collection of Offensive C# Tooling

omnispray

Modular Enumeration and Password Spraying Framework

osint_collection

Maintained collection of OSINT related resources. (All Free & Actionable)

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

panhunt

PANhunt searches for credit card numbers (PANs) in directories.

passthestats

A script that quickly generates statistics about cracked passwords

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-cheat-sheet-1

Work in progress...

penetration-testing-tools

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

pentest-tools

pentestly

Python and Powershell internal penetration testing framework

pentestpackage

a package of Pentest scripts I have made or commonly use

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

pgexec

Script and resources to execute shell commands using access to a PostgreSQL service

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

poc-exploits

Select proof-of-concept exploits for software vulnerabilities to aid in identifying and testing vulnerable systems.

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised. Portia performs privilege escalation as well as lateral movement automatically in the network

powerless

Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

powermeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

powersharppack

powershell

NetSPI PowerShell Scripts

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server