hexachordanu Goto Github PK

adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

aiosmb

Fully asynchronous SMB library written in pure python

at-ps

Adversary Tactics - PowerShell Training

automating-metasploit-with-bash

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

betafast

Vulnerable thick client applications used as examples in the Introduction to Hacking Desktop Applications blog series

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

cloud_ip_ranges

Identify IP addresses owned by public cloud providers

container-security-checklist

Checklist for container security - devsecops practices

cors_vulnerable_lab-without_database

ebook-bypassingavsbycsharp

eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)

empire

Empire is a PowerShell and Python post-exploitation agent.

impacket-examples-windows

The great impacket example scripts compiled for Windows

internal-pentest-playbook

Internal Network Penetration Test Playbook

inveighzero

Windows C# LLMNR/mDNS/NBNS/DNS/DHCPv6 spoofer/man-in-the-middle tool

invoke-recon

Powershell script helping for domain enumeration - Written while doing the 'Advanced Red Team' lab from pentesteracademy

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

microsoftwontfixlist

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

onelistforall

Rockyou for web fuzzing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-scripts-py3

This repo will contain tutorials for scripting in python and how various modules can be used by pentesters in their task automation / exploit writing.

phpass_crack

A password cracker for Portable PHP password hashes

psp

random

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

red-team-essentials

This repo will contain some basic pentest/RT commands.

resolvers

The most exhaustive list of reliable DNS resolvers.

securitytips

sharpedrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.