Repository Index

game of active directory

• active-directory
• infrastructure-as-code
• pentest
• ansible

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

• penetration-testing
• red-teaming
• windows
• fireeye-flare

Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.

• badusb
• badusb-payloads
• flipper-zero
• flipperzero

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

• exploit
• 0day
• poc
• getshell

The Official USB Rubber Ducky Payload Repository

• badusb
• ducky-payloads
• duckyscript
• hak5

Privilege Escalation Enumeration Script for Windows

• pentest-tool
• windows
• windows-privilege-escalation
• privilege-escalation

Automation for internal Windows Penetrationtest / AD-Security

• pentesting
• automation
• adsecurity
• privilege-escalation

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

• penetration-testing
• penetration
• testing
• tools

The Official Bash Bunny Payload Repository

• badusb
• bashbunny
• duckyscript
• hak5

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

• poshc2
• c2
• redteam
• nettitude

The goal of this repository is to document the most common techniques to bypass AppLocker.

• applocker
• bypass
• awl
• rules

A Powershell incident response framework

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

• powershell
• powershell-modules
• incident-response
• containment