acknowledgeHim's repositories
adaudit
Powershell script to do domain auditing automation
AQUARMOURY
My musings in C and offensive tooling
awesome-yara
A curated list of awesome YARA rules, tools, and people.
azucar
Security auditing tool for Azure environments
Azure-AD-Password-Checker
Azure AD Password Checker
cloudsploit
Cloud Security Posture Management (CSPM)
CME-Module-info
CrackMapExec module checks LOG files (combination IP and Hostname) when connected to the system and prints login information from logs.
crackerjack
CrackerJack / Hashcat Web Interface / Context Information Security
github-dorks
Find leaked secrets via github search
Grouper2
Find vulnerabilities in AD Group Policy
HELi
Multicore EVTX to Elasticsearch ingestor for incident responders.
LaZagne
Credentials recovery project
lsassy
Remotely parse lsass dumps and extract credentials
nCentralDumpsterDiver
This application utilized the Self Registration feature to create a rogue agent that then dumps ApplianceConfiguration settings which may or may not contain information such as plain text passwords. This was reported to SolarWinds PSIRT on 10/10/2019 with very little feedback.
PANhunt
PANhunt searches for credit card numbers (PANs) in directories.
peasant
LinkedIn reconnaissance tool
PENTESTING-BIBLE
articles
Powershell-PCI-Compliance
This Powershell script can be used to configure the local computer policy to the configurations specified in the Tenable PCI Compliance Audit file (https://www.tenable.com/downloads/audit).
prowler
Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
pyGPOAbuse
Partial python implementation of SharpGPOAbuse
Responder
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
ScoutSuite
Multi-Cloud Security Auditing Tool
singularity
A DNS rebinding attack framework.
the-practical-linux-hardening-guide
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
try000001
Dead Simple o365 Credential Spraying
WIN-MASTER
A python script file to remotely analyse and exploit Microsoft Windows system via impacket.
zerotier_lan_access
For when you just need full access to that remote LAN