kusk

Find-SensitiveAzStorageAccounts

A PowerShell script designed to detect misconfigured Azure Storage Accounts that could potentially be exploited for privilege escalation and lateral movement

ckb_popgen

rs-shell

A dirty PoC for a reverse shell with cool features in Rust

IoctlHunter

IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.

40-questions

Questions that I ask myself at the end of each year and each decade.

ws2016lab

Windows Server 2016 rapid lab deployment scripts

pimpmyadlab

TCM PEH Course AD Lab Build Script (Hydra-DC, Punisher-Workstation, Spiderman-Workstation)

UltimateFileTransferList

Ultimate File Transfer List

bluekeep

Public work for CVE-2019-0708

code-snippets

Various code snippets

webshell

This is a webshell open source project

eternal_blue_powershell

Port of eternal blue exploits to powershell

nacker

Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch.

PentestHardware

Kinda useful notes collated together publicly

TinyShell

A very tiny PHP shell

ADAPE-Script

Active Directory Assessment and Privilege Escalation Script

libc-database

Build a database of libc offsets to simplify exploitation

preeny

Some helpful preload libraries for pwning stuff.

scripts

Scripts I use during pentest engagements.

redsnarf

RedSnarf is a pen-testing / red-teaming tool for Windows environments

ptfileprep

This tool creates an initial file repository directory tree structure for penetration test reporting/file storage based on single host, list of hosts, or nmap or netdiscover ping sweep of given network range to keep things organized throughout the engagement and save time assembling the final report.

trevorc2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

certstream-python

Python library for connecting to CertStream

Command-line-text-processing

:zap: From finding text to search and replace, from sorting to beautifying text and more :art:

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

impacket

Impacket is a collection of Python classes for working with network protocols.

HITCON-Training

For Linux binary Exploitation

domained

Multi Tool Subdomain Enumeration

bbqsql

SQL Injection Exploitation Tool