goosvorbook

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

emba

EMBA - The firmware security analyzer

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

LOLDrivers

Living Off The Land Drivers

ConPtyShell

ConPtyShell - Fully Interactive Reverse Shell for Windows

pretender

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

Terminator

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

PsMapExec

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

PSPKIAudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

NimPlant

A light-weight first-stage C2 implant written in Nim.

BlueHound

BlueHound - pinpoint the security issues that actually matter

HijackLibs

Project for tracking publicly disclosed DLL Hijacking opportunities.

Crassus

chameleon

PowerShell Script Obfuscator

KQL

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

NimBlackout

Kill AV/EDR leveraging BYOVD attack

PPLcontrol

Controlling Windows PP(L)s

VDR

Vulnerable driver research tool, result and exploit PoCs

Timeroast

Timeroasting scripts by Tom Tervoort

GeoWordlists

GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.

drivers-binaries

Exploitable drivers, you know what I mean

Microsoft-Defender-for-Identity

Additional resources to improve customer experience with Microsoft Defender for Identity

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

wcreddump

Fully automated windows credentials dumper, from SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with a mounted windows drive.

java-reverse-tcp

JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.

Linux-Privilege-Escalation

All Linux privilege Escalation methods are listed under one MarkDown🦁 i.e Kernel Exploits to Cronjobs

Automated-CME-Password-Spraying

A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout Threshold and a Reset Account Lockout Counter.

Progress-MoveIT-CVE-2023

Information about Progress MoveIT CVE