hum4ng0d Goto Github PK

active_directory

Notes and resources for the Active Directory YouTube series on https://youtube.com/JohnHammond010

admodule

Microsoft signed ActiveDirectory PowerShell module

arbitrium-rat

Arbitrium is a cross-platform, fully undetectable remote access trojan, to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding rules

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

breach-parse

A tool for parsing breached passwords

burpsuite-for-pentester

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

c2-server

Python based c2 server with a basic beacon server to route the traffic from dummy server to prevent attacker's ip from getting exposed

charlotte

c++ fully undetected shellcode launcher ;)

cli_chatgpt_in_python

cook

A unique wordlist generator, updater & saver, and payload builder.

curse2death

A Powerfull Windows Ransomware with a Fully Undetectable Persistent Backdoor | System Halt Attack etc

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

gmsadumper

Lists who can read any gMSA password blobs and parses them if the current user has access.

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

hum4ng0d.github.io

ish

Linux shell for iOS

jsshell

JSshell - JavaScript reverse/remote shell

kali-clean

my kali desktop setup

kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

krbrelayx

Kerberos unconstrained delegation abuse toolkit

lfi-fuzz

A python script to enumerate and attempt to get code execution from LFI vulnerabilities

lfi-fuzzer-burp-suite

Local File Inclusion Burp-Suite Intruder Payload Generator Plugin

libpeconv

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

lime-rat

LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)

machound

mitm6

pwning IPv4 via IPv6