marakovalcik Goto Github PK

ldapdomaindump

Active Directory information dumper via LDAP

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

m4r0s4k-hacking-cheat-sheet

M4R0S4K Hacking Cheat Sheet

maldump

Multi-quarantine extractor

mass3

medsec

Network and pentest tool for Linux systems.

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

microburst

A collection of scripts for assessing Microsoft Azure security

mimikatz

A little tool to play with Windows security

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

nccfsas

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

nerve

NERVE Continuous Vulnerability Scanner

nmap-vulners

NSE script based on Vulners.com API

o365creeper

Python script that performs email address validation against Office 365 without submitting login attempts.

o365recon

retrieve information via O365 with a valid cred

optimizationframework

Stochastic programming optimization framework based on GAMS and Python.

oscp-2022

Notes compiled for the OSCP exam.

oscp-cookbook

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

osint

Collections of tools and methods created to aid in OSINT collection

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest-cheatsheets

pianotiles

2D game written in JAVA. Inspirated by Piano Tiles from GP.

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

planetsimulation

pocs

our proof of concept scripts