phr33fall Goto Github PK

adaudit

Powershell script to do domain auditing automation

bloodhound-customqueries

Custom Queries - Brought Up to BH4.1 syntax

closedports

credential-dumping

This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential Access) with examples. There are multiple ways to perform the same tasks

grip

Preview GitHub README.md files locally before committing them.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hashcatrules

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

krbrelayx

Kerberos unconstrained delegation abuse toolkit

lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

mitm6

pwning IPv4 via IPv6

nessusparser-excel

NessusV2 File Parser

ppn

Pentester's Promiscuous Notebook

remote

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

scoutsuite

Multi-Cloud Security Auditing Tool

shcheck

A basic tool to check security headers of a website

sudo_killer

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

sysinternals