yazidshil Goto Github PK

ad-attack-defense

Active Directory Security For Red & Blue Team

admodule

Microsoft signed ActiveDirectory PowerShell module

bloodhound

Six Degrees of Domain Admin

commando-vm

commix

Automated All-in-One OS command injection and exploitation tool.

crackmapexec

A swiss army knife for pentesting networks

deathstar

Automate getting Domain Admin using Empire

empire

Empire is a PowerShell and Python post-exploitation agent.

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

impacket

Impacket is a collection of Python classes for working with network protocols.

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

mimikatz

A little tool to play with Windows security

nishang

Nishang - Offensive PowerShell for penetration testing and offensive security.

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

python-pentest-tools

Python tools for penetration testers

redsnarf

RedSnarf is a pen-testing / red-teaming tool for Windows environments

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rsg

ReverShellGenerator - A tool to generate various ways to do a reverse shell

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

silenttrinity

An asynchronous post-exploitation agent powered by Python, IronPython, C# and .NET's DLR

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

static-binaries

Various *nix tools built as statically-linked binaries