bandrel

OCyara

Performs OCR on image files and scans them for matches to YARA rules

check_hashes

Ahab

Ahab the whale hunter. Python script to interact with Docker API typically unauthenticated.

cdpcrawler

Script uses ssh and telnet to crawl a network and display cdp neighbor information. This information is parsed and the neighbors are connected to and so on.

hostnames_from_certs

PetitPotam

solarflare

SolarWinds Orion Account Audit / Password Dumping Utility

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

truffleHog

Searches through git repositories for high entropy strings, digging deep into commit history

BloodHound

Six Degrees of Domain Admin

bogus_secrets

catinabox

Intro to Testing and Test Automation in Python

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

CrackMapExec

A swiss army knife for pentesting networks

DeathStar

Automate getting Domain Admin using Empire (https://github.com/EmpireProject/Empire)

dockerpwn

documentor

ews-crack

impacket

Impacket is a collection of Python classes for working with network protocols.

katacoda-scenarios

Katacoda Scenarios

ntlmscan

scan for NTLM directories

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

PotFileUtils

pre2k-TS

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

RAU_crypto

Hard-coded encryption key remote file upload exploit for CVE-2017-11317, CVE-2017-11357 (Telerik UI for ASP.NET AJAX)

spoonmap

streamdeck_profiles

UhOh365

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

wifite