mjn0619's starred repositories
RogueWinRM
Windows Local Privilege Escalation from Service Account to System
RottenPotato
RottenPotato local privilege escalation from service account to SYSTEM
mimikittenz
A post-exploitation powershell tool for extracting juicy info from memory.
HostRecon
This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
RootHelper
A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
Lockdoor-Framework
🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
firmwalker
Script for searching the extracted firmware file system for goodies!
peerflix-alpine
run peerflix and openvpn inside a docker container with a localtunnel to connect to.
P4wnP1_WiFi_covert_channel_client
P4wnP1 - WiFi covert channel - Client agent (experimental Proof of Concept) by MaMe82
Parsec-Cloud-Preparation-Tool
Launch Parsec enabled cloud computers via your own cloud provider account.
git-vuln-finder
Finding potential software vulnerabilities from git commit messages
cve-search
cve-search - a tool to perform local searches for known vulnerabilities
CarbonCopy
A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
mfastealer
Stealing MFA/2FA tokens and using them to logon with VPN clients
LAPSToolkit
Tool to audit and attack LAPS environments
DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
Check-LocalAdminHash
Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of two of my favorite tools along with some of my own code. It utilizes Kevin Robertson's (@kevin_robertson) Invoke-TheHash project for the credential checking portion. Additionally, the script utilizes modules from PowerView by Will Schroeder (@harmj0y) and Matt Graeber (@mattifestation) to enumerate domain computers to find targets for testing admin access against.