sp00ks-git

hat

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

sp00ks-git.github.io

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

o365recon

retrieve information via O365 and AzureAD with a valid cred

Osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

pretender

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

Rubeus

Trying to tame the three-headed dog.

Snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

unleashed-firmware

Flipper Zero Unleashed Firmware

-Keyestudio-Solar-Tracking-Mod

Keyestudio Solar Tracking Modded Code for all kit parts (except LED) and actual serial outputs

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

AzureADRecon

AzureADRecon is a tool which gathers information about the Azure Active Directory and generates a report which can provide a holistic picture of the current state of the target environment.

Certify

Active Directory certificate abuse.

chisel

A fast TCP/UDP tunnel over HTTP

Egress-Assess

Egress-Assess is a tool used to test egress data detection capabilities

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilgophish

evilginx3 + gophish

flipper-zero-evil-portal

Evil portal app for the flipper zero + WiFi dev board

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

hashcat

World's fastest and most advanced password recovery utility

Invoke-Obfuscation

PowerShell Obfuscator

MFASweep

A tool for checking if MFA is enabled on multiple Microsoft Services

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

sccmhunter

stable-diffusion-webui

Stable Diffusion web UI

TeamFiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

xencrypt

A PowerShell script anti-virus evasion tool