surbo Goto Github PK

abc

Script to check a list of passwords against haveibeenpwned.com/Passwords without sharing the real password.

april

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

bloodhound

Six Degrees of Domain Admin

cortex_urlscan_analyzer

Cortex analyzer for urlscan.io.

cyberchef-vbs

The start of vbs tool for cyberchef

elevate

espcanary

golang_reverse_https_meterpreter

A reverse https meterpreter payload written in Go

herohunter

Searches urlscan.io submissions for webpages that contain common phishing files such as common credential login splash pages.

hhupd.exe

http-info

Homemade urlscan.io in a docker container

invoke-loginprompt

Invokes a Windows Security Login Prompt and outputs the clear text password.

knockknock

How to test if FireEye is inline

log4jscanwin

Log4j Vulnerability Scanner for Windows

misc

misp-modules

Modules for expansion services, import and export in MISP

overflow

Microsoft Flow Attack Framework

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

reverse_ssh

By far one of the stupidest things I've been thinking of for a while. Have an ssh client connect to a server, and then provide the server the ability to control the client

rumpshaker

Zoom Vulnerability URL path that allows an unauthenticated attacker to guess a meeting room id. Successful exploit may lead to sensitive information disclosure as well as access to a valid meeting id.

sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

st2-057

St2-057 Poc Example

vulhub

Docker-Compose files for vulnerability environments

warp-zone

Download tool-kits and other payloads by blending in with Microsoft Azure Infrastructure. Bypass web proxy restrictions when downloading files.

workbench

xmlrpc-scan

Scan a list of domain names looking for XMLRPC.php