harleyqu1nn Goto Github PK

3snake

Tool for extracting information from newly spawned processes

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

applicationwhitelistbypasstechniques

A Catalog of Application Whitelisting Bypass Techniques

blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

cheatsheets

Penetration Testing/Security Cheatsheets

cobaltstrike-toolkit

Some useful scripts for CobaltStrike

commando-vm

csfm

Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

gmailpersist

Gmail Knocker

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

invoke-phant0m

Windows Event Log Killer

jquery.terminal

jQuery Terminal Emulator

kerberoast

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

oddballscripts

Random collection of scripts

os-scripts

Personal Collection of Operating Systems Scripts

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

pasties

A collection of random bits of information common to many individual penetration tests, red teams, and other assessments

pentestscripts

Scripts that are useful for me on pen tests

powershell-suite

My musings with PowerShell

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

ppdump-public

Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDump() Shellcode

pypykatz

Mimikatz implementation in pure Python

sharpedrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

sharpprocenum

.NET tool for enumeration processes and dumping memory.