z3ro110 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-penetration-testing

Active Directory Penetration Testing for Red Teams

active-directory-wordlists

Active Directory Wordlists

admodule

Microsoft signed ActiveDirectory PowerShell module

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

awesome-flipperzero

🐬 A collection of awesome resources for the Flipper Zero device.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-redteam-cheatsheet

Active Directory & Red-Team Cheat-Sheet in constant expansion.

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

awvscan

New On Live Web Vul Scan

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

beroot

Privilege Escalation Project - Windows / Linux / Mac

bitb

Browser In The Browser (BITB) Templates

bloodhound

Six Degrees of Domain Admin

buffer-overflow-guide

This Bufferflow Guide includes instructions and the scripts necessary for Buffer Overflow Exploitation. This guide is a supplement for TheCyberMentor's walkthrough. Please watch his walkthrough if you're confused. Feel free to implement Pull Requests or raise Issues.

byob

An open-source post-exploitation framework for students, researchers and developers.

c2_redteam_cheatsheets

Useful C2 techniques and cheatsheets learned from engagements

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cheatsheets

Helped during my OSCP lab days.

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexec

A swiss army knife for pentesting networks

crto

Certified Red Team Operator

crto-1

cve-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

cve-2020-11651-poc

PoC exploit of CVE-2020-11651 and CVE-2020-11652

cve-2022-28219

PoC for ManageEngine ADAudit Plus CVE-2022-28219

debian-ssh

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.