jbarcia

PCI-Audit-Script

armory

Armory is a tool meant to take in a lot of external and discovery data from a lot of tools, add it to a database and correlate all of related information.

GHunt

🕵️‍♂️ Investigate Google Accounts with emails.

NetNTLMtoSilverTicket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

at-ps

Adversary Tactics - PowerShell Training

Cloud-Security-Research

Cloud-related research releases from the Rhino Security Labs team.

debian_ansible

ansible playbook to create a debian desktop

dockerfiles

gtfo

Search gtfobins and lolbas files from your terminal

hammer

Dow Jones Hammer : Protect the cloud with the power of the cloud(AWS)

kali_raw

A quick and easy way to deploy Kali on a system exposed to the internet.

lyncsmash

locate and attack Lync/Skype for Business

PenTestScripts

Scripts that are useful for me on pen tests

PortPush

A small Bash utility used for pivoting into internal networks upon compromising a public-facing host.

PowerHub

A web application to transfer PowerShell modules, executables, snippets and files

pypykatz_agent_dn

Pypykatz agent implemented in .NET

pypykatz_server

Pypykatz server

red-kube

Red Team KubeCTL Cheat Sheet

RedDolphin

Red Team Scripts for AWS.

RedGhost

Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.

SharpExchangePriv

SharpPack

An Insider Threat Toolkit

SharpSniper

Find specific users in active directory via their username and logon IP address

sipvicious

SIPVicious OSS is a set of security tools that can be used to audit SIP based VoIP systems.

SkyArk

SkyArk helps to discover, assess and secure the most privileged entities in AWS

subjack

Subdomain Takeover tool written in Go

ts100

The Feature Packed Alternate Open Source firmware for the TS100 iron by miniware.

UhOh365

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

unlocker-1

VMware Workstation macOS

viproy-voipkit

VIPROY - VoIP Pen-Test Kit for Metasploit Framework