Qftm

BypassNeo-reGeorg

免杀版Neo-reGeorg

Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

Venom

Venom - A Multi-hop Proxy for Penetration Testers

Stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

frida-ios-dump

pull decrypted ipa from jailbreak device

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

ENScan_GO

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

AD-AssessmentKit

Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.

DarkAngel

DarkAngel 是一款全自动白帽漏洞扫描器，从hackerone、bugcrowd资产监听到漏洞报告生成、漏洞URL截屏、消息通知。

attack_data

A repository of curated datasets from various attacks

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

pywhisker

Python version of the C# tool for "Shadow Credentials" attacks

Whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

MalSCCM

SharpWSUS

ADFSRelay

Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS

ADCSPwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

PrivExchange

Exchange your privileges for Domain Admin privs by abusing Exchange

ShadowCoerce

MS-FSRVP coercion abuse PoC

DFSCoerce

RelayX

NTLM relay test.

CVE-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

ExchangeRelayX

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

NtlmRelayToEWS

ntlm relay attack to Exchange Web Services

krbrelayx

Kerberos unconstrained delegation abuse toolkit

PetitPotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.