TheOPSECGuy

Rubeus

Trying to tame the three-headed dog.

mimikatz

PKINITtools

Tools for Kerberos PKINIT and relaying to AD CS

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

RDPassSpray

Python3 tool to perform password spraying using RDP

OneRuleToRuleThemStill

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

Check-Service-Paths

Powershell script to check for unquoted service paths and insecure service permissions

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

BloodHound.py

A Python based ingestor for BloodHound

hugo-theme-serial-programmer

A Hugo theme for serial programmers (-.-)

amass

In-depth attack surface mapping and asset discovery

subfinder

Fast passive subdomain enumeration tool.

password_cracking_rules

One rule to crack all passwords. or atleast we hope so.

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

Optimised-hashcat-Rule

OneRuleToRuleThemAll... hashcat optimised rule

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

steampipe-plugin-aws

Use SQL to instantly query AWS resources across regions and accounts. Open source CLI. No DB required.

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

Pwdlyser

Pwdlyser is an all encompassing security auditing tool. This repo serves as the open-source base for the new version of Pwdlyser (previously closed-source).

awesome-vulnerable

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

PowerShell_IPv4NetworkScanner

Powerful asynchronus IPv4 network scanner for PowerShell

arachni

Web Application Security Scanner Framework

drawio

draw.io is a JavaScript, client-side editor for general diagramming.

hacks

A collection of hacks and one-off scripts

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

azure-sec-lab

A small pentesting lab for Azure

kdigger

Kubernetes focused container assessment and context discovery tool for penetration testing

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

kube-hunter

Hunt for security weaknesses in Kubernetes clusters