michiiii Goto Github PK

aadconnectcredentialdump

Newer version of @_xpn_ & @tijldeneut credential dumping script, which also extracts the Azure Sync Account

adrecon-inmem

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

aiosmb

Fully asynchronous SMB library written in pure python

azurecis

Powershell scripts to report on components from the CIS benchmarks for Azure

bens-obsidian-template

This is how I have my Obsidian set up.

bloodhoundqueries

capcom-rootkit

Capcom Rootkit POC

check-smbsigning

Check-SMBSigning

cis-benchmark-osx

Shell scripts to audit OS X security using CIS Benchmarks.

deathcon_workshop

Material from my workshop at Deathcon Conference

defendtheflag

Get started fast with a built out lab, built from scratch via Azure Resource Manager (ARM) and Desired State Configuration (DSC), to test out Microsoft's security products.

detectionlab-deploy-env

Add-On for the popular detection lab to quickly get some users, vulnerablites and action

directory-listing-tree

Little tool to make a tree out of a page that is vulnerable to directory listing

dpat

Domain Password Audit Tool for Pentesters

dumper2020

Yet another LSASS dumper

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

get-adreconresults

get-fileshareaccessrights

Multiple functions to evaluate critical file permissions on a specified network share

get-filteredlogonevent

Retrieves logon events from the Windows Security log, excluding LogonType 3 and the "SYSTEM" account.

get-lapspasswords

Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.

invoke-dcsync

PowerShell script to DCSync NT-Hashes from an Active Directory Domain Controller (DC)

invoke-workstationassessment

Security Assessments for Workstations

kali-preseed

Installer preseed configurations for Kali Linux

kali_vagrant

quickly set up a new vagrant instance with KALI

mailrelay

a little python script to test SMTP servers for relay weaknesses

maldev-for-dummies

A workshop about Malware Development

matrix42-empcrypt

Matrix42 executable and DLL to decrypt password hashes

metasploit-framework

Metasploit Framework

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

netntlmtosilverticket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket