Repository Index

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

• powershell
• nishang
• security
• red-team

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

• penetration-testing
• red-teaming
• windows
• fireeye-flare

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

• exploit
• 0day
• poc
• getshell

The Official USB Rubber Ducky Payload Repository

• badusb
• ducky-payloads
• duckyscript
• hak5

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

• empire
• c2
• redteam-infrastructure
• hacktoberfest

Privilege Escalation Enumeration Script for Windows

• pentest-tool
• windows
• windows-privilege-escalation
• privilege-escalation

Automation for internal Windows Penetrationtest / AD-Security

• pentesting
• automation
• adsecurity
• privilege-escalation

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

• penetration-testing
• penetration
• testing
• tools

The Official Bash Bunny Payload Repository

• badusb
• bashbunny
• duckyscript
• hak5

A collection of scripts for assessing Microsoft Azure security

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

• active-directory
• powershell
• redteaming
• penetration-testing

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

• poshc2
• c2
• redteam
• nettitude

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

Collection of hashcat lists and things.

• hashcat
• hashcat-rules
• hashcat-masks
• password-cracking

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

• powershell
• powershell-modules
• incident-response
• containment