scriptidiot Goto Github PK

0xpat.github.io

0xpat blog

301-7-express-demo

A demo directory for building out a server.js file with Node and Express

3in1

combining some shit projects to make a bigger shit

aad_prt_bof

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

abusing_weak_acl_on_certificate_templates

Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

accomplice

Tools for discovery and abuse of COM hijacks

acd-escalationpwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts (Petitpotam) and relaying to the certificate service.

aceldr

Cobalt Strike UDRL for memory scanner evasion.

active-directory-certificate-services-abuse

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-scan-plus-plus

ActiveScan++ Burp Suite Plugin

ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

adcscoercepotato

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

adokit

Azure DevOps Services Attack Toolkit

adpeas

Powershell tool to automate Active Directory enumeration.

advanced-process-injection-workshop

aes-killer

Burp Plugin to decrypt AES encrypted traffic on the fly

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation and more.

aggressiveproxy

Project to enumerate proxy configurations and generate shellcode from CobaltStrike

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

ah2021workshop

Malware development for red teaming workshop

airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

akame-loader

Akame is an open-source, UD shellcode loader written in C++17.

alnx-1001-cmstp

Win-UAC-Bypass ALNX-1001-CMSTP