curi0usJack

luckystrike

A PowerShell based utility for the creation of malicious Office macro documents.

ADImporter

Credit to Helge Klein - https://helgeklein.com/blog/2015/02/creating-realistic-test-user-accounts-active-directory/

rubeus2ccache

Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.

ansible-redelk

Ansible playbooks for instrumenting a Red Team environment with RedElk

activedirectory

This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.

psfire

simple demo of using C# & System.Management.Automation.dll to run powershell code (b64 encoded) without powershell.exe

custompayload

Put output from msfvenom into custom c# project for AV evasion

pssync

Powershell Synchronization Repository

Ansible-SSH-Conf

Uses Ansible to generate a new EC2 instance then an SSH conf file for that instance.

dotfiles

slides

autobrute

Simple http/ntlm brute forcer with some helpful options.

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

metasploit-framework

Metasploit Framework

ansible_arch_vm

Ansible playbook to build and configure an Arch VM

gimme

A tool for alerting on searches for products you want. Shameless streaming project. xDD

Powermad

PowerShell MachineAccountQuota and DNS exploit tools

ROADtools

The Azure AD exploration framework.

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

vcr-1

Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.

AndrewSpecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

dnscat2-powershell

A Powershell port of dnscat2, a DNS covert channel tool.

Empire

Empire is a pure PowerShell post-exploitation agent.

EQGRP

Decrypted content of eqgrp-auction-file.tar.xz

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

PSSQLite

PowerShell module to query SQLite databases