icheernoom

Arjun

HTTP parameter discovery suite.

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

MagiskTrustUserCerts

A Magisk/KernelSU module that automatically adds user certificates to the system root CA store

frida-interception-and-unpinning

Frida scripts to directly MitM all HTTPS traffic from a target mobile application

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

BloodHound

Six Degrees of Domain Admin

Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

AD-control-paths

Active Directory Control Paths auditing and graphing tools

GoFetch

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

PassTheCert

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

ars0n-framework

A Modern Framework for Bug Bounty Hunting

adb_root

Magisk Module that allows you to run "adb root". Android 10 only. Probably will work with Android 9. Definitely not with Android 11/12.

Azure-AD-Incident-Response-PowerShell-Module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

nuclei-ai-extension

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

SharpKiller

Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8

cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

.NetConfigLoader

.net config loader

AD-Canaries

The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory Canary objects.

ADCSync

Use ESC1 to perform a makeshift DCSync and dump hashes

BloodHound-Owned

A collection of files for adding and leveraging custom properties in BloodHound.

adfsbrute

A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

DefiVuln

Adding Defi Vulnerabilities.

SharpVeeamDecryptor

Decrypt Veeam database passwords

subtake

Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.

awsmBloodhoundCustomQueries

Collection of cyphers for bloodhound

Splunk-RCE-poc

hashcathelper

Convenience tool for hashcat

Red-Teaming

Collection of Notes and CheatSheets used for Red teaming Certs

SharpHoundCommon

Common library used by SharpHound.

xxxpwn

Advanced XPath Injection Tool