ShutdownRepo

awesome-flipperzero

🐬 A collection of awesome resources for the Flipper Zero device.

d2

D2 is a modern diagram scripting language that turns text to diagrams.

rtl_433

Program to decode radio transmissions from devices on the ISM bands (and other frequencies)

ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

MANSPIDER

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

DonPAPI

Dumping DPAPI credz remotely

SpoolFool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

RustHound

Active Directory data collector for BloodHound written in Rust. 🦀

Group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

lsarelayx

NTLM relaying for Windows made easy

Max

Maximizing BloodHound. Max is a good boy.

LdapRelayScan

Check for LDAP protections regarding the relay of NTLM authentication

goddi

goddi (go dump domain info) dumps Active Directory domain information

GoMapEnum

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

powerview.py

Just another Powerview alternative

Vulny-Code-Static-Analysis

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

PyShell

Multiplatform Python WebShell

RITM

Roast in the Middle

PetitPotam

Python implementation for PetitPotam

Sharpmad

C# version of Powermad

modifyCertTemplate

ADCS cert template modification and ACL enumeration

CrackHound

ctfd-parser

A python script to dump all the challenges locally of a CTFd-based Capture the Flag.

Abusing_Weak_ACL_on_Certificate_Templates

Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

GoldenCopy

Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.

DirSync

DirSync is a simple proof of concept PowerShell module to demonstrate the impact of delegating DS-Replication-Get-Changes and DS-Replication-Get-Changes-In-Filtered-Set.

aclpwn.py

Active Directory ACL exploitation with BloodHound