Loop-Man

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

GOAD

game of active directory

uAssets

Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.

thc-tips-tricks-hacks-cheat-sheet

Various tips & tricks

blackbird

An OSINT tool to search for accounts by username in social networks.

WindowsExploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

PrintSpoofer

Abusing impersonation privileges through the "Printer Bug"

linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

ADCSPwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

AllForOne

AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,

ProxyNotShell-PoC

shells

Script for generating revshells

Cheat-Sheet---Active-Directory

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

Mainframed

Mainframe security auditing and scripts

birp

Big Iron Recon & Pwnage

Windows-Privilege-Escalation-CheatSheet

Windows Privilege Escalation Methodology

aspx-reverse-shell

Aspx reverse shell

cicspwn

CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.

Privesc

Privilege escalation tools on Mainframe

zOS

z/OS - all things security

eCPPTv2-Personal-Cheatsheet-ESP-

Personal CheatSheet used for the exam made with Obsidian, download the repo and use the resources within Obsidian for a better experience. CHISEL & SOCAT BINARIES ARE WITHIN THE PIVOTING SECTION.

vnc-screenshot

Nmap NSE script that captures a screenshot from the host(s) over VNC using vncsnapshot.

ClickNRoot

This is a small script to make the local exploitation process easier. It downloads the precompiled exploit for x86 and x64 architectures and can also automatic compile local on the target system

NMAP

NMAP scripts for TN3270 interaction as well as NJE. Most notably TSO User Enumeration and Brute Force. CICS transaction ID enumeration and NJE node name brute forcing.

http-pulse_ssl_vpn.nse

Nmap NSE script to detect Pulse Secure SSL VPN file disclosure CVE-2019-11510

TPX-Brute

z/OS Mainframe TPX panel account enumerator and brute forcer

cve2018-13379-nmap-script

CVE-2018-13379 Script for Nmap NSE.

cr3-nmap

NMAP NSE script for detecting devices that speak the Crimson v3 protocol