s3cur3th1ssh1t Goto Github PK

aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

ad-attack-defense

Active Directory Security For Red & Blue Team

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

amsitrigger

The Hunt for Malicious Strings

audit_scripts

Scripts to gather system configuration information for offline/remote auditing

autordpwn

The Shadow Attack Framework

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-profile-readme-templates

A collection of awesome readme templates to display on your profile

awesome-windows-domain-hardening

A curated list of awesome Security Hardening techniques for Windows.

badpotato

Windows 权限提升 BadPotato

bitmancer

Nim Library for Offensive Security Development

bitwardendecryptbrute

Wordlist attacks on Bitwarden data.json files

blackeye

The most complete Phishing Tool, with 32 templates +1 customizable

blocketw

.Net Assembly to block ETW telemetry in current process

bmc_bladelogic

BMC Bladelogic RSCD exploits including remote code execution - CVE-2016-1542, CVE-2016-1543, CVE-2016-5063

carbuncle

Tool for interacting with outlook interop during red team engagements

caro-kann

Encrypted shellcode Injection to avoid Kernel triggered memory scans

chasingpolarbears

files for write-up

cheatsheets

Penetration Testing/Security Cheatsheets

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cobaltstrike-aggressor-scripts-collection

Collection of tested Cobaltstrike aggressor scripts.

creds

Some usefull Scripts and Executables for Pentest & Forensics

darkamour_clone

denim

Automated compiler obfuscation for nim

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

empeisdecrypt

Decrypt Matrix42 Empirum /EIS Passwords

empire

Empire 3.0 is a PowerShell and Python 3.x post-exploitation framework.

excel-phish

Phish password protected Excel-Files