jrodriguez556 Goto Github PK

ad-attack-defense

Active Directory Security For Red & Blue Team

adape-script

Active Directory Assessment and Privilege Escalation Script

at-ps

Adversary Tactics - PowerShell Training

bloodhound

Six Degrees of Domain Admin

bmc_bladelogic

BMC Bladelogic RSCD exploits including remote code execution - CVE-2016-1542, CVE-2016-1543, CVE-2016-5063

byob

BYOB (Build Your Own Botnet)

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

chashell

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

chipsec

Platform Security Assessment Framework

cpsoundboard

Play everyone's favorite sounds at the click of a button!

cracker-script

crackmapexec

A swiss army knife for pentesting networks

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

ddsquat

Script that is an extension to URLCrazy (by Andrew Horton - http://www.morningstarsecurity.com/research/urlcrazy) that attempts to do some of the leg work/validation after getting results of URLCrazy.

derogdom

Script to enumerate derogatory domain names for a given domain.

direct-sybase-asa-discover.nse

Like the original, but targets a specific IP

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

empire

Empire is a PowerShell and Python post-exploitation agent.

evilginx

Man-in-the-middle attack framework used for phishing credentials and session cookies of any web service.

evilginx-0365-beta

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilgophish

evilginx2 + gophish

gadgetprobe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

h8mail

Password Breach Hunting and Email OSINT locally or using premium services. Supports chasing down related email

hans

IP over ICMP

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

iodine

Official git repo for iodine dns tunnel

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.