mrcakeguy Goto Github PK

automatic-proxylogon-exploit

Automatic OWA Proxylogon Exploit

autovolatility

Run several volatility plugins at the same time

awesome-hacking

A curated list of awesome Hacking tutorials, tools and resources

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

exploits

Windows Exploits

h8mail

Email OSINT and password breach hunting. Use h8mail to find passwords through different breach and reconnaissance services, or the infamous Breached Compilation torrent

jsloader

js免杀shellcode，绕过杀毒添加自启

leaklooker

Find open databases with Shodan

malconfscan

Volatility plugin for extracts configuration data of known malware

mirrordump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

passcat

Passwords Recovery Tool

phishing_catcher

Phishing catcher using Certstream

phishing_kits

Exposing phishing kits, creators and malicious actors.

phishlets

Phishlets for Evilginx2 (MITM proxy Framework)

postfix-server-setup

powerhub

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

proxylogon

ProxyLogon Pre-Auth SSRF To Arbitrary File Write

proxyshell-exchange

Poc script for ProxyShell exploit chain in Exchange Server

reverse-shell

Reverse Shell as a Service

rt-101

VB.net Remote Administrator Tool (RAT)

rubeus-gui

GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

silent-miner-xmr-monero

CPU Miner monero

spfabuse

SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

spoofcheck

Simple script that checks a domain for email protections

sticky_keys_hunter

A script to test an RDP host for sticky keys and utilman backdoor.