antonybwana Goto Github PK

adcskiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

android-ssl-pinning-bypass

The script allows to bypass SSL pinning on Android >= 7 and makes APK file ready for HTTPS traffic inspection

antonybwana

Config files for my GitHub profile.

awesome

Awesome collection of resources 😎

awesome-hacking-resources

A collection of hacking / penetration testing resources to make you better!

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

cve-2019-5544_cve-2020-3992

Python / scapy module implementing SRVLOC/SLP protocol and scans for enabled OpenSLP services.

cve-2021-21974

POC for CVE-2021-21974 VMWare ESXi RCE Exploit

cve-2021-22006

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

dettect

Detect Tactics, Techniques & Combat Threats

frios

iOS Frida Scripts

internal-pentest-playbook

Internal Network Penetration Test Playbook

ioxidresolver

IOXIDResolver.py from AirBus Security

jekyll-blog-template

linux-bash-commands

:godmode: Ultimate list of Linux bash commands, cheatsheet and resources

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and and Vulnerability checks

locksmith

A small tool built to detect and fix common misconfigurations in Active Directory Certificate Services.

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final

mindmaps

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

my-poc-exploits

PoC exploits I wrote. They're as is and I will not offer support

natpinning

NAT Pinning test suite tool for penetration testers.

operation-bag-of-toys

Planning for the Christmas heist

pentesting-bible

articles

poc

pocorexp

PoC or Exp Of Vulnerability

redteaming_cheatsheet

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

tokentactics

Azure JWT Token Manipulation Toolset