ottrur Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

admodule

Microsoft signed ActiveDirectory PowerShell module

ansibleplaybooks

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

bhg

Code samples for No Starch Press Black Hat Go

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bloodhound.py

A Python based ingestor for BloodHound

caldera

Scalable Automated Adversary Emulation Platform

chisel

A fast TCP tunnel over HTTP

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexec

A swiss army knife for pentesting networks

depix

Recovers passwords from pixelized screenshots

dnspy

.NET assembly editor, decompiler, and debugger

empire

Empire is a PowerShell and Python post-exploitation agent.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

gohacktools

Hacker tools on Go (Golang)

gophish

Open-Source Phishing Toolkit

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

impacket

Impacket is a collection of Python classes for working with network protocols.

intro-html

A robot powered training repository :robot:

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

ioxidresolver

IOXIDResolver.py from AirBus Security

kerberoast

learn-go-with-tests

Learn Go with test-driven development

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

modlishka

Modlishka. Reverse Proxy.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.