donesh Goto Github PK

0xsp-mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

certify

Active Directory certificate abuse.

creds

Some usefull Scripts and Executables for Pentest & Forensics

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

get-system-techniques

impacket

Impacket is a collection of Python classes for working with network protocols.

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

invoke-evasion

PowerShell Obfuscation and Data Science

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

pentest-tools

powersharppack

pspkiaudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

rpc-backdoor

A basic emulation of an "RPC Backdoor"

rubeus

Trying to tame the three-headed dog.

safetykatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sharpnamedpipepth

Pass the Hash to a named pipe for token Impersonation

sharpup

SharpUp is a C# port of various PowerUp functionality.

test

whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

winpwn

Automation for internal Windows Penetrationtest / AD-Security