Beast code in Giters

Jeff McJunkin's repositories

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

Language:PythonMIT8 10

passphrase-wordlist

Shameless clone of https://gitlab.com/initstring/passphrase-wordlist

Language:PythonMIT200

nerdlist

list of passwords more likely to be used by sysadmins, general nerds, and folk with access

100

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Language:PowerShellNOASSERTION100

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Language:Python1 10

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Language:C100

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Language:Python100

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient

Language:PythonGPL-3.0100

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Language:PythonNOASSERTION100

BloodHound

Six Degrees of Domain Admin

Language:PowerShellNOASSERTION000

bloodhound-import

Python based BloodHound data importer

Language:PythonMIT010

CeWL

CeWL is a Custom Word List Generator

Language:Ruby010

compute-runtime

Intel(R) Graphics Compute Runtime for OpenCL(TM). Replaces Beignet for Gen8 (Broadwell) and beyond.

Language:C++MIT010

DeathStar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

Language:PythonGPL-3.0000

Forensics

Scripts and code referenced in CrowdStrike blog posts

Language:Shell010

hashcat

World's fastest and most advanced password recovery utility

Language:C000

metasploit-framework

Metasploit Framework

Language:RubyNOASSERTION000

metasploit-runner

This is a gem that provides the ability to create a workspace, import scan data from nexpose, and perform a webscan, a web audit, and perform an automated exploit against the host(s).

Language:RubyMIT010