caiomichele Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adalanche

Active Directory ACL Visualizer - who's really Domain Admin?

admodule

Microsoft signed ActiveDirectory PowerShell module

assless-chaps

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

azredteamenumscript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

badassmacros

BadAssMacros - C# based automated Malicous Macro Generator.

bfdecrypt

Utility to decrypt App Store apps on jailbroken iOS 11.x

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bloodhoundqueries

byeintegrity8-uac

Bypass UAC at any level by abusing the Program Compatibility Assistant with RPC, WDI, and more Windows components

cheesetools

Self-developed tools for Lateral Movement/Code Execution

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

conferences

Conference slides

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

decryptautologon

Command line tool to extract/decrypt the password that was stored in the LSA by SysInternals AutoLogon

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

enterprise-pentesting

experienced-pentester-osep

files

hivenightmare

Exploit for HiveNightmare - CVE-2021–36934

impacket

Impacket is a collection of Python classes for working with network protocols.

inceptor

Template-Driven AV/EDR Evasion Framework

krbrelayx

Kerberos unconstrained delegation abuse toolkit

mapt-run

Simple script to setup a local hosted network for Mobile Application Penetration Testing

mvt

MVT is a forensic tool to look for signs of infection in smartphone devices

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

myapplockerbypasssummary

Simple APPLocker bypass summary

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

npk

A mostly-serverless distributed hash cracking platform