blackninja23 Goto Github PK

activedirectorylab_sec

A walkthrough on how I set up Microsoft Server 2019 on a Virtual Machine to run Active Directory on it. I then configure a Domain Controller that will allow me to run a domain. After that I ran a Powershell script to create over 1000 users in Active Directory and log into those newly created accounts on another client that uses the domain I set up

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

blackninja23

blackninja23.github.io

My blog

bountystrike-sh

Poor (rich?) man's bug bounty pipeline https://dubell.io

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2019-5544_cve-2020-3992

Python / scapy module implementing SRVLOC/SLP protocol and scans for enabled OpenSLP services.

cve-2023-3460

Exploit for CVE-2023-3460. Unauthorized admin access for Ultimate Member plugin < v2.6.7

detect_bluekeep.py

Python script to detect bluekeep vulnerability (CVE-2019-0708) with TLS/SSL and x509 support

dnsrecon

DNS Enumeration Script

dotfiles

ds_walk

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

eoploaddriver_release

Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)

evil-macro

Generate a malicious macro in your doc to reverse shell in powershell

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

go-windapsearch

Utility to enumerate users, groups and computers from a Windows domain through LDAP queries

graphql-security-labs

GraphQL security workshop labs

grecon

Another version of katana, more automated but less stable. the purpose of this small tool is to run a Google based passive recon against your scope.

haproxy

HAProxy Load Balancer's development branch (mirror of git.haproxy.org)

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

infoga

Infoga - Email OSINT

ioxidresolver

IOXIDResolver.py from AirBus Security

kirbi2hashcat

Convert kirbi ticket from mimikatz into hashcat format to crack it

lazagne

Credentials recovery project

ldap_shell

AD ACL abuse

mimikatz

A little tool to play with Windows security

minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.