dahelanren Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

cef

Chromium Embedded Framework (CEF) official mirror. A simple framework for embedding Chromium-based browsers in other applications.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

hardeningkitty

Invoke-HardeningKitty - Checks and hardens your Windows configuration

hppdll

Source code for HppDLL - local password dumping using MsvpPasswordValidate hooks

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

nuclei

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

powerpxe

Powershell script to extract information from boot PXE

printnightmare

pwnmachine

Vagrant setup for building a machine for CTF/exploit development

sharepointfbapack

The SharePoint FBA Pack for SharePoint 2010, 2013, 2016 & 2019. Web parts and tools to manage your SharePoint forms based authentication users.

stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

symboliclink-testing-tools

whonow

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档