lazy0wl Goto Github PK

aclpwn.py

Active Directory ACL exploitation with BloodHound

afl

加点注解，看源码学习用

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-hacking-1

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-windows-exploitation

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

catmyphish

Search for categorized domain

checklists

Red Teaming & Pentesting checklists for various engagements

content_discovery

used to discover contents in web applications

cve-2020-1472

Test tool for CVE-2020-1472

deathstar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

dkmc

DKMC - Dont kill my cat - Malicious payload evasion tool

dllsforhackers

Dll that can be used for side loading and other attack vector.

domainfrontinglists

A list of Domain Frontable Domains by CDN

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

impacket

Impacket is a collection of Python classes for working with network protocols.

intranet_penetration_cheetsheets

做redteam时使用，修改自Ridter的https://github.com/Ridter/Intranet_Penetration_Tips

kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

lazy-redteamer-scripts

maliciousmacrogenerator

Malicious Macro Generator

malleable-c2-profiles-collection

A collection of Malleable C2 profiles that work with Cobalt Strike 3.x.

malware-samples

A collection of malware samples caught by several honeypots i manage

meltdown

This repository contains several applications, demonstrating the Meltdown bug.

nessusparser-excel

NessusV2 File Parser

nishang

Nishang - PowerShell for penetration testing and offensive security.

openedr

Open EDR public repository

pentest-tools

Custom pentesting tools