hpxpat Goto Github PK

spoolsample

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

spray-passwords

PoC script for password spraying with Active Directory

spraywmi

SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

sslyze

Fast and full-featured SSL scanner.

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

sublist3r

Fast subdomains enumeration tool for penetration testers

tests

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode

umap

The USB host security assessment tool

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

userenum

Domain user enumeration tool

webappdefaultsdb

A DB of known Web Application Admin URLS, Username/Password Combos and Exploits

webappurls

A public list of URLs generally useful to webapp testers and pentesters

weblogicpassworddecryptor

PowerShell script and Java code to decrypt WebLogic passwords

websocket_egress

Websocket based egress tester

weevely3

Weaponized web shell

wifuzzit

a 802.11 wireless fuzzer

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

windows-kernel-explorer

A free but powerful Windows kernel research tool

workshops

wow64dm

WOW64 => x64 adapter

wsuspect-proxy

WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections

xxeinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

zackattack

Unveiled at DEF CON 20, NTLM Relaying to ALL THE THINGS!

zmap

ZMap Internet Scanner