rev10d Goto Github PK

.net-deobfuscator

Lists of .NET Deobfuscator and Unpacker (Open Source)

504vsa

504 VSAgent

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

apt06202001

Applied Purple Teaming - Infrastructure, Threat Optics, and Continious Improvement - June 6, 2020

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bruteloops

cookiethievery

crackmapexec

A swiss army knife for pentesting networks

credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

definitive-guide-kql

Sample queries and data as part of the Microsoft Press book, The Definitive Guide to KQL

dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

eavesarp

Analyze ARP requests to identify hosts that are communicating with one another.

event-forwarding-guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

exploitdb

The official Exploit Database repository

fzf

:cherry_blossom: A command-line fuzzy finder

godoh

🕳godoh - A DNS-over-HTTPS C2

gosecure

An easy to use and portable Virtual Private Network (VPN) system built with Linux and a Raspberry Pi. #nsacyber

gosecure-10d

Forked goSecure VPN Repo

helk

The Hunting ELK

hostrecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

impacket

Impacket is a collection of Python classes for working with network protocols.

kql

KQL queries for Advanced Hunting

lnkreator

quick wscript execution to create lnk files

lograbber

PS1 script to connect to remote system and retrieve logs