K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
- exploit
- 0day
- poc
- getshell
Repository Index
89,073 visible repositories in the index
1–22 of 22 · Most stars
The Official USB Rubber Ducky Payload Repository
- badusb
- ducky-payloads
- duckyscript
- hak5
Privilege Escalation Enumeration Script for Windows
- pentest-tool
- windows
- windows-privilege-escalation
- privilege-escalation
Automation for internal Windows Penetrationtest / AD-Security
- pentesting
- automation
- adsecurity
- privilege-escalation
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.
- penetration-testing
- penetration
- testing
- tools
The Official Bash Bunny Payload Repository
- badusb
- bashbunny
- duckyscript
- hak5
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
A collection of scripts for assessing Microsoft Azure security
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
- active-directory
- ad-cs
- adcs
- pki
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
- bypass-antivirus
- antivirus-evasion
- antivirus
- attack
This repository is a collection of powershell functions every hacker should know
- badusb
- badusb-payloads
- flipperzero
- hak5
PowerShell MachineAccountQuota and DNS exploit tools
Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.
- azure
- azuread
- microsoft365
- microsoft365-compliance
SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
- pentesting
- red-team
- windows
- registry
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
Zero Infrastructure Password Cracking
- cloudtopolis
- cracking
- hashes
- cloud
Collection of hashcat lists and things.
- hashcat
- hashcat-rules
- hashcat-masks
- password-cracking