mjn0619's starred repositories
bucket-stream
Find interesting Amazon S3 Buckets by watching certificate transparency logs.
RobotsDisallowed
A curated list of the most common and most interesting robots.txt disallowed directories.
HoneyCredIPTracker
Quick script to gather stats on incoming credentials and IPs for a honey listener.
icebreaker
Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
BadBlood
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.
Sticky-Keys-Slayer
Scans for accessibility tools backdoors via RDP
sticky_keys_hunter
A script to test an RDP host for sticky keys and utilman backdoor.
s3-buckets-finder
Find AWS S3 buckets and test their permissions.
burner-email-providers
A list of temporary email providers
disposable-mailbox
self-hosted disposable email service (php) using catch-all and imap
disposable-email-domains
a list of disposable and temporary email address domains
dnscat2-powershell
A Powershell client for dnscat2, an encrypted DNS command and control tool.
DNSExfiltrator
Data exfiltration over DNS request covert channel
ConPtyShell
ConPtyShell - Fully Interactive Reverse Shell for Windows