toteb Goto Github PK

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

amass

In-depth Attack Surface Mapping and Asset Discovery

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

attack_range_local

Build a attack range in your local machine

awesome-rce-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

bloodhound

Six Degrees of Domain Admin

bloodhound-certipy

Fork of BloodHound with PKI nodes and edges for Certipy along with some minor personal improvements

bloodhound.py

A Python based ingestor for BloodHound

breach-parse

A tool for parsing breached passwords

cve-2021-44228-log4shell-hashes

Hashes for vulnerable LOG4J versions

cve-2022-47966

POC for CVE-2022-47966 affecting multiple ManageEngine products

dfscoerce

docker

docker test files

dorkfinder

Automatic tool to find Google Dorks

edr-testing-script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

enablewindowslogsettings

Documentation and scripts to properly enable Windows event logs.

es-detection-rules

Rules for Elastic Security's detection engine

evtx-to-mitre-attack

Set of EVTX samples (>270) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.

expertrules

This repository contains a set of rules samples that can be directly used with McAfee Endpoint Security, in the Exploit Prevention policy.

gophish

Open-Source Phishing Toolkit

gvisor

havoc

The Havoc Framework

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

icmp-transfertools

Transfer files to and from a Windows host via ICMP in restricted network environments.

impacket

Impacket is a collection of Python classes for working with network protocols.

invoke-atomicredteam

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

invoke-dosfuscation

Cmd.exe Command Obfuscation Generator & Detection Test Harness

irm

Incident Response Methodologies

jenkins-decrypt

Credentials dumper for Jenkins

jsearch