7.8 KiB
7.8 KiB
- Web Application Testing
- https://github.com/almandin/fuxploider
- https://github.com/jonaslejon/malicious-pdf
- https://github.com/riramar/Web-Attack-Cheat-Sheet
- https://github.com/m3n0sd0n4ld/GooFuzz
- https://github.com/t3l3machus/toxssin
- PHP web shell with nice appearance and multiple methods of executing commands to bypass disabled methods: https://github.com/flozz/p0wny-shell
- Active Directory
- https://github.com/tevora-threat/SharpView
- https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md
- https://github.com/ollypwn/Certipy
- Customize Bloodhound: https://github.com/porterhau5/BloodHound-Owned
- https://rohnspowershellblog.wordpress.com/2013/03/19/viewing-service-acls/
- https://github.com/dirkjanm/adidnsdump - DNS enumeration
- ForgeCert - Forge certificates with compromised CA certificate and private key
- pre2k - Foothold via pre-Windows 2000 computer objects
- SilentHound - Much quieter AD enumeration than BloodHound
- LinikatzToolkit for attacking AD on Linux
- Cobalt Strike
- https://github.com/josephkingstone/cobalt_strike_extension_kit
- https://github.com/ajpc500/BOFs
- PowerLessShell Aggressor script to execute PowerShell via MSBuild
- PowerLurk - PowerShell script for malicious WMI event subscriptions
- Rasta Misc Tools - Various C# tools by Rasta
- https://github.com/cobbr/SharpShell
- https://github.com/Porchetta-Industries/pyMalleableC2
- https://github.com/boku7/BokuLoader - UDRL
- https://github.com/Cracked5pider/KaynStrike - UDRL
- https://github.com/mgeeky/ElusiveMice - UDRL
- https://github.com/netero1010/RDPHijack-BOF
- Nanodump - Sneaky memory dump BOF
- Social Engineering/Phishing
- https://github.com/lockedbyte/CVE-2021-40444
- Clone a website with 2FA - https://github.com/fireeye/ReelPhish
- https://github.com/kgretzky/evilginx2 - Bypass MFA by MITMing login to actual website
- https://github.com/fin3ss3g0d/evilgophish - Combine EvilNginx2 with GoPhish
- LDAP
- Local Enumeration
- DNSleuth- Python script for spying on DNS queries being made by the machine
- OSINT/Recon
- Gotator- Generate DNS wordlists through permutations -- for brute force
- HTTPX- Fast HTTP probing toolkit
- Katana- Crawling and spidering framework
- Nuclei- Open-source vulnerability scanner
- realm- Tool for recursively traversing SSL/TLS certificates for DNS names
- GitLeaks - Tool for searching Github repos
- truffleHog- Another tool for searching Github repos
- LinkFinder- Scrape links out of JavaScript files
- Post-exploitation
- https://github.com/nil0x42/phpsploit
- https://github.com/sevagas/swap_digger
- https://github.com/redcode-labs/Bashark
- https://github.com/AlessandroZ/BeRoot
- https://github.com/GhostPack
- https://github.com/AdrianVollmer/PowerHub
- https://github.com/Flangvik/SharpCollection
- https://github.com/atn1ght/FakeAuth - Generate a fake login prompt to collect cleartext credentials
- https://github.com/matterpreter/OffensiveCSharp - Really cool repo with a lot of interesting tools for a variety of purposes
- LaZagne - Catch-all tool for gathering credentials during post-ex
- PPLDump - Exploit to bypass PPL (patched on most recent builds)
- Sapito - mDNS sniffer/interpreter
- AV/EDR Evasion
- https://github.com/optiv/ScareCrow
- https://github.com/C-Sto/BananaPhone
- https://github.com/TheWover/donut
- https://github.com/danielbohannon/Invoke-Obfuscation
- https://github.com/CCob/SharpBlock
- https://github.com/StudyCat404/uuid_exec_shellcode
- https://gist.github.com/xpn/fabc89c6dc52e038592f3fb9d1374673#file-unmanaged_dotnet_unhook_etw-c
- https://github.com/GetRektBoy724/SharpUnhooker
- https://github.com/icyguider/Nimcrypt2
- https://github.com/mgeeky/Stracciatella
- https://github.com/threatexpress/metatwin - Copy file metadata/signature
- https://github.com/jfmaes/Invoke-DLLClone - Copy metadata and signature and exports
- ContainYourself- EDR bypass via Windows containers
- Code Execution
- https://github.com/Tylous/ZipExec - Code execution from within an encrypted zip
- micr0_shell- Python script for generating Windows x64 PIC reverse shell shellcode, with no null bytes. Smaller than msfvenom equivalents and without the sigs.
- Privilege Escalation
- UAC Bypass
- Password Spraying/Brute Force/Password Cracking
- https://github.com/J3rryBl4nks/PasswordCrackingMethodology
- https://github.com/hashcat/kwprocessor
- https://github.com/ustayready/fireprox - Use AWS API gateway to rotate source IPs during password spray/brute force
- https://github.com/dafthack/MSOLSpray - Password spray Microsoft Online accounts/enumerate account and auth status
- HashMob- Great password cracking resources--wordlists, rulesets, etc.
- Credential Harvesting
- https://github.com/djhohnstein/SharpChromium
- https://github.com/praetorian-inc/PortBender
- https://gist.github.com/N4kedTurtle/8238f64d18932c7184faa2d0af2f1240
- https://github.com/0x09AL/WordSteal - Create Word document with embedded UNC path image for harvesting hashes
- Connection
- https://github.com/magic-wormhole/magic-wormhole - Encrypted file transfer
- Lateral Movement
- Persistence
- https://github.com/fireeye/SharPersist
- https://github.com/HarmJ0y/DAMP
- RegReeper- POC for setting registry keys using APIs not monitored by Sysmon
- Privesc
- Infrastructure
- https://github.com/mdsecactivebreach/Chameleon - actively categorize domain
- https://github.com/Flangvik/AzureC2Relay - Azure redirectors
- https://github.com/threatexpress/cs2modrewrite - Automatically generate mod_rewrite rules
- Purple Teaming
- Kerberos
- Cloud
- https://github.com/hausec/PowerZure - PowerView but for Azure
- GitHub - mattrotlevi/lava: Microsoft Azure Exploitation Framework - Pacu, but for Azure
- Red-Kube - Generalized tool for all manner of Kubernetes attacks
- How to Hack Like a Ghost - Repo - Scripts/code from the book, including POC C2 backdoors, etc.
- AWS Security Tools - Compilation of tools used for testing AWS
- Dev
- corkami - A helpful repo containing visualizations of various file formats - helps with understanding their structure