sec-tools-repo Goto Github PK
Type: User
Type: User
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
AADInternals PowerShell module for administering Azure AD and Office 365
AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses
ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.
Microsoft signed ActiveDirectory PowerShell module
Azure DevOps Services Attack Toolkit
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
a repository that contains the program.cs source file that has D/Invoke bare minimum implementation and AES encryption for shellcode execution
Fully asynchronous SMB library written in pure python
Small and highly portable detection tests based on MITRE's ATT&CK.
Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
Run several volatility plugins at the same time
Awesome EDR Bypass Resources For Ethical Hacking
Everything and anything related to password spraying
Red Team Cheatsheet in constant expansion.
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
A recursive internet scanner for hackers.
Six Degrees of Domain Admin
Custom Query list for the Bloodhound GUI based off my cheatsheet
A Python based ingestor for BloodHound
Six Degrees of Domain Admin
BloodyAD is an Active Directory Privilege Escalation Framework
A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.
Automated Adversary Emulation Platform
Encrypted shellcode Injection to avoid Kernel triggered memory scans
An ADCS honeypot to catch attackers in your internal network.
Active Directory certificate abuse.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.