nerbix

BloodHound

Six Degrees of Domain Admin

Probable-Wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

mac-dev-setup

A beginner's guide to setting up a development environment on macOS

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

xTuring

Build, customize and control you own LLMs. From data pre-processing to fine-tuning, xTuring provides an easy way to personalize open-source LLMs. Join our discord community: https://discord.gg/TgHXuSJEk6

archerysec

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

powercat

netshell features all in version 2 powershell

PCredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

DomainPasswordSpray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

DSInternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

trevorc2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

luckystrike

A PowerShell based utility for the creation of malicious Office macro documents.

EmPyre

A post-exploitation OS X/Linux agent written in Python 2.7

DET

(extensible) Data Exfiltration Toolkit (DET)

Invoke-CradleCrafter

PowerShell Remote Download Cradle Generator & Obfuscator

WMImplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

PoshC2_Old

Powershell C2 Server and Implants

PowerMeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

empire-web

PowerShell Empire Web Interface

ObfuscatedEmpire

ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.

BrowserGather

Fileless web browser information extraction

OWA-Toolkit

Powershell module to assist in attacking Exchange/Outlook Web Access

Get-MailboxReport.ps1

PowerShell script to generate a report of mailboxes, including information such as item count, total size, and other useful attributes.

mac-setup

A macOS development environment setup guide and installation scripts.

Invoke-NeutralizeAV

Quick PoC I Wrote for Bypassing Next Gen AV Remotely for Pentesting

mail-x_smtpapi

Adds SendGrid X-SMTPAPI header support to Mail

ccdc_malware

Talk given at DerbyCon and RuxCon 2016

ATTiRe

Attack Tool Timing and Reporting - Structured Attack Logging Format

misc