quikilr Goto Github PK

cfdb

Common Findings Database

chainbreaker

Mac OS X Keychain Forensic Tool

changeme

A default credential scanner.

cheatsheets

Penetration Testing/Security Cheatsheets

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

chlonium

Chromium Cookie import / export tool

chrometools

A collection of tools to abuse chrome browser

cli-microsoft365

Manage Microsoft 365 and SharePoint Framework projects on any platform

clickoncegenerator

Quick Malicious ClickOnceGenerator for Red Team

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cobaltstrikeforensic

Toolset for research malware and Cobalt Strike beacons

codeexecutiononwindows

A list of ways to execute code on Windows using legitimate Windows tools

command-injection-payload-list

🎯 Command Injection Payload List

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

commix

Automated All-in-One OS Command Injection and Exploitation Tool

conveigh

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

convert-invoke-kerberoast

Converts the output from Invoke-Kerberoast into hashcat format.

cookie_crimes

Read local Chrome cookies without root or decrypting

cookiecrimesjs

A cross-platform one-liner to steal a user's cookies from Chrome <- cool

corporate_masks

8-14 character Hashcat masks based on analysis of 1.5 million NTLM hashes cracked while pentesting

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

crackmapexecwin

The great CrackMapExec tool compiled for Windows

credbandit

credgrap_chrome

Still in dev mode

credgrap_ie_edge

Extract stored credentials from Internet Explorer and Edge

credking

Password spraying using AWS Lambda for IP rotation

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

csasc

Cobalt Strike Aggressor Script Collection

csp_security_mistakes

Cloud service provider security mistakes

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.