LionelCosgrove

Orange-arsenal

Arsenal is just a quick inventory and launcher for hacking programs

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

CrackMapExec

A swiss army knife for pentesting networks

ItWasAllADream

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PS-ManageInactiveAD

PowerShell scripts to report on & manage inactive Active Directory objects, including users, computers, groups and OUs.

PSPKIAudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

test

windowsserverdocs

Public content repository for Windows Server 2016 content.