SecFury

nmapAutomator

A script that you can run in the background!

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

LOLDrivers

Living Off The Land Drivers

youtube-transcript-api

This is a python API which allows you to get the transcript/subtitles for a given YouTube video. It also works for automatically generated subtitles and it does not require an API key nor a headless browser, like other selenium based solutions do!

liodeus.github.io

Cr3dOv3r

Know the dangers of credential reuse attacks.

oscp-notetaking

This repository houses some of the small scripts I had used to quickly document throughout my OSCP course. This was referenced on YouTube, and should be made available to others!

thm

My adhoc and abhorrent notes and work for TryHackMe machines. This repository is for personal use but is made public in case other somehow benefit from it.

poor-mans-pentest

This a collection of the code that I have written for the Poor Man's Pentest presentation.

awesome-chatgpt-prompts

This repo includes ChatGPT prompt curation to use ChatGPT better.

Pentest-Everything

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

public

Repository of scripts and so on from my blog https://blog.sonnes.cloud. Scripts for Exchange, Microsoft 365, Entra ID, Active Directory, Windows OS and so on. Some will be here just to be public. Collection of scripts, will try keep them in order 😁 If you like these, please sponsor this project using the Sponsor button below ❤️

PowerHuntShares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

freeCodeCamp

freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.

Active-Directory-Bulk-User-Creation

Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

CleanupMonster

This module provides an easy way to cleanup Active Directory from dead/old objects based on various criteria. It can also disable, move or delete objects. It can utilize Azure AD, Intune and Jamf to get additional information about objects before deleting them.

active-directory-pentest

Creating-A-Virtual-Machine-

Creating a virtual machine in active directory.

Azure_Active_Directory

Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics

untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

NixCan

Linpeas optimization tool

Checklists

Red Teaming & Pentesting checklists for various engagements

babyagi

certsync

Dump NTDS with golden certificates and UnPAC the hash

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

pentesting-resources

Resources, repos and scripts for pentesters and bug bounty.

Osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

PentestTools

Awesome Pentest Tools Collection

monkey

Infection Monkey - An open-source adversary emulation platform