mjn0619

RogueWinRM

Windows Local Privilege Escalation from Service Account to System

RottenPotato

RottenPotato local privilege escalation from service account to SYSTEM

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

RDPSpray

Tool for password spraying RDP

HostRecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

RootHelper

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

EggShell

iOS/macOS/Linux Remote Administration Tool

Powerless

Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

Revssl

A script that automates generation of OpenSSL reverse shells

Bashark

Bash post exploitation toolkit

Lockdoor-Framework

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

FCL

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

AD_Sec_Tools

NetSet

Operational Security utility and automator.

firmwalker

Script for searching the extracted firmware file system for goodies!

peerflix-alpine

run peerflix and openvpn inside a docker container with a localtunnel to connect to.

P4wnP1_WiFi_covert_channel_client

P4wnP1 - WiFi covert channel - Client agent (experimental Proof of Concept) by MaMe82

Parsec-Cloud-Preparation-Tool

Launch Parsec enabled cloud computers via your own cloud provider account.

WindowsAttackAndDefenseLab

git-vuln-finder

Finding potential software vulnerabilities from git commit messages

cve-search

cve-search - a tool to perform local searches for known vulnerabilities

CarbonCopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

fame

FAME Automates Malware Evaluation

flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.

mfastealer

Stealing MFA/2FA tokens and using them to logon with VPN clients

LAPSToolkit

Tool to audit and attack LAPS environments

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

DomainPasswordSpray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

Check-LocalAdminHash

Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of two of my favorite tools along with some of my own code. It utilizes Kevin Robertson's (@kevin_robertson) Invoke-TheHash project for the credential checking portion. Additionally, the script utilizes modules from PowerView by Will Schroeder (@harmj0y) and Matt Graeber (@mattifestation) to enumerate domain computers to find targets for testing admin access against.

Privesc

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.