tfmarques23 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

activedirectory

Apuntes Pentesting a ActiveDirectory PentesterAcademy

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

ad-pentesting-notes

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-redteam-cheatsheet

Active Directory & Red-Team Cheat-Sheet in constant expansion.

az-104-microsoftazureadministrator

AZ-104 Microsoft Azure Administrator

azure-sentinel-threat-intelligence

Repository containing scripts to add IOCs of known attacks/vulnerabilities

commix

Automated All-in-One OS Command Injection Exploitation Tool.

crto

Certified Red Team Operator

cve-2020-1350_honeypoc

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

emailseccheck

EmailSecCheck is a lightweight Python utility used to check for common SPF/DMARC misconfigurations that may allow for email spoofing.

go365

An Office365 User Attack Tool

htrace.sh

My simple Swiss Army knife for http/https troubleshooting and profiling.

iprotate_burp_extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

linkstoleaks

linux-privilege-escalation

This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machines and CTFs with examples.

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

myfavoritetools

MyFavoriteTools

nmapautomator

A script that you can run in the background!

nopac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

notes4all

Notes4Allthings

ntlmrelayx2proxychains

oscp-stuff

List of Stuff I did to get through the OSCP :D

oscp_notes

OSCP Guide

owasp-web-checklist

OWASP Web Application Security Testing Checklist

pandoras-box

This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.

pentest-tools