xelerated Goto Github PK

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

activedirectoryenumeration

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adape-script

Active Directory Assessment and Privilege Escalation Script

adpeas

Powershell tool to automate Active Directory enumeration.

applocker-deployment-scripts

AppLocker Deployment Scripts

archive

Hacking Methodology, Cheatsheats, Conceptual-Breakdowns

awesome-osint

:scream: A curated list of amazingly awesome OSINT

azure-domain-controller

ARM Template that builds an Active Directory Domain Controller

backdoorfactory

A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire.

bindview

buffer_overflow

Don't let buffer overflows overflow your mind

bug-bounty-toolz

BBT - Bug Bounty Tools

certi

ADCS abuser

crackmapexec

A swiss army knife for pentesting networks

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

halberd

Load balancer detection tool

honeypot

Honeypot that emulates several protocols (incl. SSH, telnet, SMTP, HTTP, SSL and SIP)

howtohunt

Collection of methodology and test case for various web vulnerabilities.

keydecoder

KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds.

log4jcenter

Exploiting CVE-2021-44228 in vCenter for remote code execution and more.

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

mssql-pentest-cheatsheet

nmap2burp

run headless burp suite pro scans based on nmap output

notes

offensiveactivedirectory

A set of instructions, command and techniques that help during an Active Directory Assessment.

on-prem-ad-user-creator-utility

Configurable Script For Creating Active Directory User Accounts