webyeti Goto Github PK

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

aws-s3-webdav

Basic AWS S3 WebDAV interface implemented in Rust

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

beacondownloadsync

bluejaytkd.github.com

Jekyll site

bofs

Collection of Beacon Object Files

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobaltbus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

confession_web

Website front end for the confession metasploit tool.

crestron_getsudopwd

Tool to exploit CVE-2018-13341 and recover hidden account password on Crestron devices

defcon26-materials

Slide deck and demo code for my DEFCON 26 talk

detectionlabelk

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

edrsandblast

eva2

Another version of EVA using anti-debugging techs && using Syscalls

fave-o-miner

Python script to pull twitter favorites and parse them from any publicly available twitter profile.

gnmap-parser

Bash script to parse multiple Nmap (.gnmap) exports into various plain-text formats for easy analysis.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

objcshellcodeloader

macOS shellcode loader written in Objective-C

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ppn

Pentester's Promiscuous Notebook

psamsi

PSAmsi is a tool for auditing and defeating AMSI signatures.

purplecloud

A little tool to play with Azure Identity - Azure Active Directory lab creation tool

pwnfox

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

redteamccode

Red Team C code repo