Lexus89

default-passwords

Overview of default passwords and extracting script for portforward.com password inventory

krb-party-tricks

CVE-2021-1675

C# and Impacket implementation of CVE-2021-1675/PrintNightmare

adPEAS

Powershell tool to automate Active Directory enumeration.

AJPy

certbot-transip-dns-01-validator

Certbot DNS-01 validation for wildcard certificates (ACME-v2)

charlotte

c++ fully undetected shellcode launcher ;)

crEAP-3

crEAP will identify WPA Enterprise mode EAP types and harvest usernames and/or handshakes if insecure protocols are in use.

CVE-2021-1676

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

Divert

WinDivert: Windows Packet Divert

eaptyper

automated supported EAP method fingerprinting tool for WPA2-Enterprise wireless networks

enumerid

Enumerate RIDs using pure Python

ExploitCapcom

This is a standalone exploit for a vulnerable feature in Capcom.sys

GTT

iptables_rules

Bash script to install iptables rules

MacGeiger

MacGeiger - a tool to track down the location of WIFI APs with sound (Geigercounter-like)

Minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

mremoteng-decrypt

mRemoteNG Config File Decrypt

MultiAV2

MultiAV scanner with Python and JSON REST API using Malice Docker AV Containers and Docker-Machine based Autoscaling

npk

A mostly-serverless distributed hash cracking platform

PS2EXE

Module to compile powershell scripts to executables

pwdumpstats

Script to output stats around weak passwords and password re-use from an NtdsAudit (pwdump) file

repotools

Bash script to install repository tools

SocksOverRDP

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

Talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

terminal_logging

Enable logging of all terminal/SSH sessions by adding a lines into /etc/bash.bashrc

vncpasswd.py

A Python implementation of vncpasswd, w/decryption abilities & extra features ;-)

vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

WebclientServiceScanner

Python tool to Check running WebClient services on multiple targets based on @leechristensen

Win-PS2EXE

Graphical frontend to PS1-to-EXE-compiler PS2EXE.ps1