techspence

ScriptSentry

ScriptSentry finds misconfigured and dangerous logon scripts.

ADeleginator

A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory

HackerArt

A collection of art inspired by the world of cybersecurity and hacking culture.

BadShares

A tool to create randomly insecure file shares that also contain unsecured credential files

EWSEmailAttachmentSaver

A Powershell script that looks for specific emails in an exchange users mailbox, downloads the attachments, then marks those emails as read and moves the messages to a processed folder for archiving.

Locksmith

A tool to identify and remediate common misconfigurations in Active Directory Certificate Services

observer

A blue team tool for watching over domains using bug hunting methodology!

EmployeeAlerts

A series of PowerShell scripts used to monitor employee Active Directory accounts and send alerts about important events or information

GetPhoneList

A PowerShell script that queries Active Directory for enabled users, sorts them by department and job title, exports the list to csv, then copies the csv to a folder

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

DA-ExcelleratorInator

A PowerShell script to find where admin and privileged accounts are running Scheduled Tasks and Services

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

PowerHuntShares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

Xymon-VMSnap

Gets snapshot information from ESXI and posts it to Xymon

xymontoslack

Send Xymon alerts to Slack

gitdork.sh

Get dorky and search GitHub for sensitive information with this simple shell script

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

SharpWSUS

SharpWSUS is a c# tool for abusing Microsoft Windows Server Update Services for Lateral Movement

SplashPWN

A local privilege escalation exploit for Splashtop Streamer for Windows prior to version 3.5.0.0

techspence.github.io

PyPATHPwner

POC Exploit for CVE-2022-26488 - Python for Windows (CPython) escalation of privilege vulnerability, discovered by the Lockheed Martin Red Team.

adeleg

Active Directory delegation management tool

ADSearch

A tool to help query AD via the LDAP protocol

cistool

A tool for managing CIS 20 Security Control Compliance

ExchangeBadIPLookup

Compare your list of IPs to a community list of known bad IPs associated with the exchange zero-day campaigns

Inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

techspence

Hey there!

wiki

Wiki.js | A modern, lightweight and powerful wiki app built on Node.js