SeemantBisht/caldera
An automated adversary emulation system
Repositories
SeemantBisht/sectimes
Tried and tested
SeemantBisht/CSharpScripts
Collection of C# scripts
SeemantBisht/HoneypotBuster
SeemantBisht/aws-waf-security-automation
Amazon WAF Security Automation deployment (modular with Terraform)
SeemantBisht/ASREPRoast
Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
SeemantBisht/Remediation-kits
For Implementing CIS Controls in Different Operating Systems
SeemantBisht/DomainCheck
DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.
SeemantBisht/domainhunter
Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names
SeemantBisht/SessionGopher
SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
SeemantBisht/public-pentesting-reports
Curated list of public penetration test reports released by several consulting firms and academic security groups
SeemantBisht/Understanding-Windows-Authorization
SeemantBisht/Invoke-CradleCrafter
PowerShell Remote Download Cradle Generator & Obfuscator
SeemantBisht/Scout2
Security auditing tool for AWS environments
SeemantBisht/MailSniper
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
SeemantBisht/DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
SeemantBisht/OSHardening
OS Hardening scripts for multiple linux based operating systems. Keep in mind this is the minimum!
SeemantBisht/C2-SaaS
SeemantBisht/demiguise
HTA encryption tool for RedTeams
SeemantBisht/kerberoast
SeemantBisht/PowerUpSQL
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
SeemantBisht/goddi
goddi (go dump domain info) dumps Active Directory domain information
SeemantBisht/Web-Shells
SeemantBisht/CredKing
Password spraying using AWS Lambda for IP rotation
SeemantBisht/Cheats
Various Cheat Sheets
SeemantBisht/webshell
This is a webshell open source project
SeemantBisht/DAMP
The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
SeemantBisht/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
SeemantBisht/DACL-and-SACL
SeemantBisht/bta
Open source Active Directory security audit framework.