gustanini

PowerTools

Powershell tools used for Red Team / Pentesting.

AD_Pentest_Bundle

Various AD tools needed for penetration testing in one place.

CVE-2022-42889-Text4Shell-POC

This repository contains a Python script to automate the process of testing for a vulnerability known as Text4Shell, referenced under the CVE id: CVE-2022-42889.

dirspider

Bash script automating directory brute forcing and crawling/spider.

WinLib_Gen

This repo contains a step-by-step guide, and tools for performing phishing attacks involving Windows Library Files.

ExploitationBundle

Bash script that automates the downloading of various exploitation tools.

DLL-Hijack-POC

A repo containing c++ source code for a malicious dll which adds a backdoor user. Useful for CTF's where DLL injection is viable.

Linux_QuickEnum

QuickEnum is a tool designed to help with privilege escalation on Linux systems

QuickView

QuickViewAD is an automatic enumeration tool powered by Powershell and AD-Module.

ADModule

Microsoft signed ActiveDirectory PowerShell module

badodf

Creates a malicious ODF document help leak NetNTLM Creds

CVE-2019-13292-WebERP_4.15

This is a Python3 script that demonstrates an exploit for a Blind SQL Injection vulnerability in WebERP version 4.15.

kerbrute

A tool to perform Kerberos pre-auth bruteforcing - forked to support m1

odat

ODAT: Oracle Database Attacking Tool - Forked for M1 Installation Guide

CVE-2020-13151---aerospike

POC for CVE-2020-13151 - aerospike RCE mod

OSEP-Tools-v2

A marriage between Octoberfest7/OSEP-Tools and chvancooten/OSEP-Code-Snippets with some improvements/additions

pinvoke

A library containing all P/Invoke code so you don't have to import it every time. Maintained and updated to support the latest Windows OS.

Scripts

Small scripts that make life better

Apophis

Apophis is a Bash script that leverages tools such as DotNetToJScript, ConfuserEx, Net-Obfuscator etc. to generate 'Shellcode runners'.

dns-exe-persistance

GhostLoader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

gustanini

Invoke-AccessCheck

a simple powershell wrapper to automate checking a user's access around the network