nack0c Goto Github PK

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

bloodhound

Six Degrees of Domain Admin

cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

certi

ADCS abuser

certify

Active Directory certificate abuse.

certipy

Tool for Active Directory Certificate Services enumeration and abuse

chisel

A fast TCP/UDP tunnel over HTTP

cloudtools

云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务器工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务器工具主要是针对ecs服务器的管理，查看、执行命令等等

crackmapexec

A swiss army knife for pentesting networks

cve-2022-39197-patch

CVE-2022-39197 漏洞补丁. CVE-2022-39197 Vulnerability Patch.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

go-mimikatz

An improvement over the original Mimikatz wrapper.

grok-1

Grok open release

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

havoc

The Havoc Framework.

hexo-theme-matery

A beautiful hexo blog theme with material design and responsive design.一个基于材料设计和响应式设计而成的全面、美观的Hexo主题。国内访问：http://blinkfox.com

i-wanna-get-all

OA漏洞利用工具

impacket

Impacket is a collection of Python classes for working with network protocols.

impacket-gui

impacket-gui

jyso

It can be either a JNDIExploit or a ysoserial. JYso是一个可以用于 jndi 注入攻击和生成反序列化数据流的工具。

lazagne

Credentials recovery project

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

moriarty

mythic

A collaborative, multi-platform, red teaming framework

nack0c.github.io

Nack0c.github.io blog

netexec

The Network Execution Tool

peiqi-wiki-book

面向网络安全从业者的知识文库🍃