Nehti

net-creds

Sniffs sensitive data from interface or pcap

Responder-Windows

Responder Windows Version Beta

PCredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Mystique

PowerShell module to play with Kerberos S4U extensions

DeploySharedLibrary

Library of functions for use within Windows Deployment Scenarios

PAL

Performance Analysis of Logs (PAL) tool

awesome-powershell

A curated list of delightful PowerShell modules and resources

Active_Directory_Scripts

Making my local storage of useful AD Scripts available to everyone.

sysmon-config

Sysmon configuration file template with default high-quality event tracing

ImportExcel

PowerShell module to import/export Excel spreadsheets, without Excel

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

ssh-inject

A ptrace POC by hooking SSH to reveal provided passwords

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

PowerShell

A collection of tools I've made, modified or found.

hashcat

World's fastest and most advanced password recovery utility

Seth

Perform a MitM attack and extract clear text credentials from RDP connections

PrivExchange

Exchange your privileges for Domain Admin privs by abusing Exchange

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

Powermad

PowerShell MachineAccountQuota and DNS exploit tools

distribution

The toolkit to pack, ship, store, and deliver container content

java-container

docker-squash

Squash docker images to make them smaller

the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

ESFileExplorerOpenPortVuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447

wsuspect-proxy

WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Pester

Pester is the ubiquitous test and mock framework for PowerShell.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

mimipenguin

A tool to dump the login password from the current linux user