Nehti

Awesome-Hacking-Resources

A collection of hacking / penetration testing resources to make you better!

caldera

Automated Adversary Emulation Platform

windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

Pass-the-Hash-Guidance

Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Hunting-Scripts

A collection of hunting and blue team scripts. Mostly others, some my own.

Powershell

Tony's collection of powershell scripts, typically geared toward cybersec

Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Blue

Script collection for blue team ops in restricted environments

rosenbridge

Hardware backdoors in some x86 CPUs

CheatSheets

CheatSheets for Powershell, Exchange, Sharepoint, Lync, RegEx, VSCode and more

Random-PowerShell-Work

Random PowerShell Work

ActiveDirectoryDomainServices

Active Directory Domain Services (ADDS)

meltdown

This repository contains several applications, demonstrating the Meltdown bug.

zabbix

Script and templates for Zabbix

ReportHTML

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

XSStrike

Most advanced XSS scanner.

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

ground-control

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

rubrik-sdk-for-powershell

Rubrik Module for PowerShell

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

awesome-appsec

A curated list of resources for learning about application security

knock

Knock Subdomain Scan

JavaSerialKiller

Burp extension to perform Java Deserialization Attacks

PowerShell

NetSPI PowerShell Scripts

PowerLurk

Malicious WMI Events using PowerShell

payloads