curi0usjack Goto Github PK

activedirectory

This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's security posture.

adimporter

Credit to Helge Klein - https://helgeklein.com/blog/2015/02/creating-realistic-test-user-accounts-active-directory/

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

ansible-redelk

Ansible playbooks for instrumenting a Red Team environment with RedElk

ansible-ssh-conf

Uses Ansible to generate a new EC2 instance then an SSH conf file for that instance.

ansible_arch_vm

Ansible playbook to build and configure an Arch VM

autobrute

Simple http/ntlm brute forcer with some helpful options.

custompayload

Put output from msfvenom into custom c# project for AV evasion

dnscat2-powershell

A Powershell port of dnscat2, a DNS covert channel tool.

dotfiles

empire

Empire is a pure PowerShell post-exploitation agent.

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

gimme

A tool for alerting on searches for products you want. Shameless streaming project. xDD

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

luckystrike

A PowerShell based utility for the creation of malicious Office macro documents.

metasploit-framework

Metasploit Framework

powermad

PowerShell MachineAccountQuota and DNS exploit tools

psfire

simple demo of using C# & System.Management.Automation.dll to run powershell code (b64 encoded) without powershell.exe

pssqlite

PowerShell module to query SQLite databases

pssync

Powershell Synchronization Repository

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

roadtools

The Azure AD exploration framework.

rubeus2ccache

Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

slides

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

vcr-1

Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.