Drew-Alleman

Drew's starred repositories

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT58606 18120

nerd-fonts

Iconic font aggregator, collection, & patcher. 3,600+ icons, 50+ patched fonts: Hack, Source Code Pro, more. Glyph collections: Font Awesome, Material Design Icons, Octicons, & more

Language:CSSNOASSERTION52953 390 968

mimikatz

A little tool to play with Windows security

Language:C19066 920 383

impacket

Impacket is a collection of Python classes for working with network protocols.

Language:PythonNOASSERTION13058 375 938

Havoc

The Havoc Framework.

Language:GoGPL-3.06361 98 319

evil-winrm

The ultimate WinRM shell for hacking/pentesting

Language:RubyLGPL-3.04337 800

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Language:PowerShellBSD-3-Clause4084 107 395

wesng

Windows Exploit Suggester - Next Generation

Language:PythonBSD-3-Clause4065 97 55

pypykatz

Mimikatz implementation in pure Python

Language:PythonMIT2744 74 98

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

Language:GoApache-2.02525 27 36

phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Language:PythonGPL-3.02171 104 96

pwnedOrNot

OSINT Tool for Finding Passwords of Compromised Email Addresses

Language:PythonMIT2147 81 60

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

Language:PowerShellGPL-3.01961 49 7

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

Language:PythonGPL-3.01937 48 75

PCredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Language:PythonGPL-3.01928 102 31

ofrak

OFRAK: unpack, modify, and repack binaries.

Language:PythonNOASSERTION1830 26 103

DomainPasswordSpray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

Language:PowerShellMIT1692 49 14