sec-tools-repo Goto Github PK

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

adfsdump

admodule

Microsoft signed ActiveDirectory PowerShell module

adokit

Azure DevOps Services Attack Toolkit

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

aes_dinvoke

a repository that contains the program.cs source file that has D/Invoke bare minimum implementation and AES encryption for shellcode execution

aiosmb

Fully asynchronous SMB library written in pure python

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

autobloody

Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound

autovolatility

Run several volatility plugins at the same time

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

awesome-password-spraying

Everything and anything related to password spraying

awesome-redteam-cheatsheet

Red Team Cheatsheet in constant expansion.

bbot

A recursive internet scanner for hackers.

bloodhound

Six Degrees of Domain Admin

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

bloodhound.py

A Python based ingestor for BloodHound

bloodhoundcommunityed

Six Degrees of Domain Admin

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

caldera

Automated Adversary Emulation Platform

caro-kann

Encrypted shellcode Injection to avoid Kernel triggered memory scans

certiception

An ADCS honeypot to catch attackers in your internal network.

certify

Active Directory certificate abuse.

cheat.sh

the only cheat sheet you need

checklists

Red Teaming & Pentesting checklists for various engagements

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.