Zamanry

gobuster

Directory/File, DNS and VHost busting tool written in Go

ike-scan

The IKE Scanner

DotNetVersionLister

Use Svendsen Tech's Get-STDotNetVersion function to get a list of installed .NET Framework versions on (remote) Windows computers. I also added a simple solution for .NET 5+

AHK_Minecraft_Tools

Simple AutoHotKey Script for Minecraft. Includes AFK-Fishing, Auto-Sweep Attack and Nether Portal Calculator.

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

EnterprisePurpleTeaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

Purple-Team-Resources

A curated list of tools and resources that I use daily as a Purple-Team operator.

PurpleOps

An open-source self-hosted purple team management web application.

gitlab-ce-ldap-sync

Synchronise users and groups (including group members) from an LDAP instance with Gitlab CE (and EE in free tier) self-hosted instance(s).

Spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

Active_Directory_Advanced_Threat_Hunting

This repo is about Active Directory Advanced Threat Hunting

quickemu

Quickly create and run optimised Windows, macOS and Linux virtual machines

Links-Extractor

Extract links from any file or the website.

NetExec

The Network Execution Tool

ACLight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

Invoke-TrimarcADChecks

The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks performed during Trimarc’s Active Directory Security Assessment (ADSA) engagement.

pi-pwnbox-rogueap

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

fluxion

Fluxion is a remake of linset by vk496 with enhanced functionality.

krackattacks-test

trufflehog

Find and verify secrets

bqm

Deduplicate custom BloudHound queries from different datasets and merge them in one customqueries.json file.

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

domainCat

Check Domain Categorization

poisontap

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

pyenv-multiuser

A pyenv plugin to enable a more friendly multi-user environment

PXEThief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

CosmicRakp

CVE-2013-4786 Go exploitation tool

mssqlrelay

Tool for MSSQL relay audit and abuse

SNMP-Write-Check

Search for writable OIDs (SNMP )