bradcausey-zz

Security-Research

Exploits written by the Rhino Security Labs team

Jbin-website-secret-scraper

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and many other juicy information.

KrbRelayUp

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

frostbyte

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

Cheatsheet-God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension

PacketStreamer

:star: :star: Distributed tcpdump for cloud native environments :star: :star:

stackrox

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.

container.training

Slides and code samples for training, tutorials, and workshops about Docker, containers, and Kubernetes.

GoMapEnum

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

o365spray

Username enumeration and password spraying tool aimed at Microsoft O365.

passphrase-wordlist

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

amazon-linux-cis

Bootstrap script for Amazon Linux to comply CIS Amazon Linux Benchmark v2.0.0

cis-benchmarks-audit

Simple command line tool to check for compliance against CIS Benchmarks

PurplePanda

Identify privilege escalation paths within and across different clouds

DPAT

Domain Password Audit Tool for Pentesters

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

python-pty-shells

Python PTY backdoors - full PTY or nothing!

PowerSharpPack

pyndiff

Generate human-readable ndiff output when comparing 2 Nmap XML scan files

SharpExfiltrate

Modular C# framework to exfiltrate loot over secure and trusted channels.

Powershell-C2

MimeSpray

MimeCast Password Spraying Tool

kerberoast

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

powercat

netshell features all in version 2 powershell

PRET

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.