pablite5 Goto Github PK

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

ashok

Ashok is a OSINT Recon Tool , a.k.a :heart_eyes: Swiss Army knife .

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

borrar_huellas

bxss

cobra

All in one tool to make your hacking easier.

crackmapexec

A swiss army knife for pentesting networks

credsleaker

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

cursedchrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

deathstar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

doublepulsar-detection-script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

ejpt

Notes, Writeups, and Cheatsheet for eJPT

ejpt-cheatsheet

eJPT Certification Cheatsheet

evil-winrm

The ultimate WinRM shell for hacking/pentesting

ezxss

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

fakelogonscreen

Fake Windows logon screen to steal passwords

finalrecon

The Last Web Recon Tool You'll Need

heartbleed-poc

:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:

hetty

An HTTP toolkit for security research.

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

insecurepowershell

InsecurePowerShell is PowerShell with some security features removed.

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

nmap-scan

Escaneo con NMAP

nmapautomator

A script that you can run in the background!

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

pentest-tools