madalin-dogaru Goto Github PK

2022pwk

Notes compiled for the OSCP exam.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

amsi_bypass_automation

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

apps-script-automation

Google Apps Script automations for managing MITRE Tactics, Techniques, and Procedures (TTPs) within a Google Sheets environment.

black-hat-rust

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

bloodhound

Six Degrees of Domain Admin

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

build-hack-patch

Lets try to learn how to hack differently. We build it, we hack it, we patch it.

catmyphish

Search for categorized domain

civies

coffee

Smarter Coffee terminal client.

com-hunting

Tools for discovery and abuse of COM hijacks

crtp-cheatsheet

Cheatsheet for the commands learned in Attack and Defense Active Directory Lab

cve-2020-5902

exploit code for F5-Big-IP (CVE-2020-5902)

cve-2023-22518

Improper Authorization Vulnerability in Confluence Data Center and Server + bonus 🔥

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dllsideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

echo-dot-pentest

Breaking the Echo Dot project for the IASC 4580 Capstone Course

edr-emulation_bestedrofthemarket

Little AV/EDR bypassing lab for training & learning purposes

exploitation-info

Collection of knowledge about information security

fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

ghidra-dark

Dark theme installer for Ghidra

gobuster

Directory/File, DNS and VHost busting tool written in Go

holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

hydrogen-hugo

An unique style personal blog theme for developers

kali-setup

Script for Kali that adds a bunch of tools and customizes it to be much better

linkedint

LinkedIn Recon Tool

madalin-dogaru

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.