ohrenmann Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

femitter-ftp-server-exploit-

godgenesis

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

hackiebox_cfw

Custom firmware for the Toniebox WIP

hackiebox_cfw_ng

HackieboxNG is a fully open source custom bootloader for the Toniebox (Firmware to come).

hashcat-cheatsheet

Hashcat Cheatsheet for OSCP

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

mindmaps4dfir

multipass

name-that-hash

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

nmapautomator

A script that you can run in the background!

orpheus

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

oscp

OSCP license passed successfully, notes made before the exam

oscp-1

OSCP custom scripts

oscp-priv-esc

Mind maps / flow charts to help with privilege escalation on the OSCP.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest

:no_entry: offsec batteries included

pentest-tools

phpbash

A semi-interactive PHP shell compressed into a single file.

powershellscripts

Collection of PowerShell scripts

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

teddy

With this tool you can dump existing files for the famous audio box or create custom ones.

teddycloud

teddyCloud is an open source server replacement for the Boxine Cloud

wesng

Windows Exploit Suggester - Next Generation