talibosmani Goto Github PK

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

killdefender

A small (Edited) POC to make defender useless by removing its token privileges and lowering the token integrity

latloader

PoC module to demonstrate automated lateral movement with the Havoc C2 framework.

leaked

Leaked? 2.0 - A Checking tool for Hash codes, Passwords and Emails leaked

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

lsarelayx

NTLM relaying for Windows made easy

malleable-c2-profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

meterpreter_paranoid_mode-ssl

Meterpreter Paranoid Mode - SSL/TLS connections

mimikatzfud

mod0burpuploadscanner

HTTP file upload scanner for Burp Proxy

multipotato

nativedump

Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)

netexec

The Network Execution Tool

nmapautomator

A script that you can run in the background!

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

office-dde-payloads

Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.

operatorskit

Collection of Beacon Object Files (BOF) for Cobalt Strike

pachine

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest-methodology

Short checklists for penetration testing methodology

pickl3

Windows active user credential phishing tool

pme-scripts

populateactivedirectory

Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, groups objects, GPOs and network shares required. It also adds ASREProast account, kerberoastable account, and misconfigured ACLs to the domain for testing purposes

postdump

powerlurk

Malicious WMI Events using PowerShell

powersharppack

powershdll

Run PowerShell with rundll32. Bypass software restrictions.

powershell_help_scripts