11skk Goto Github PK

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

abusing_weak_acl_on_certificate_templates

Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

aclpwn.py

Active Directory ACL exploitation with BloodHound

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adaclscanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

adcskiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

adfsdump

adhunttool

official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

admodule

Microsoft signed ActiveDirectory PowerShell module

adsearch

A tool to help query AD via the LDAP protocol

advanced-process-injection-workshop

alterx

Fast and customizable subdomain wordlist generator using DSL

am0n-eye

apkleaks

Scanning APK file for URIs, endpoints & secrets.

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

apt38-0day-stealer

APT38 Tactic PoC for Stealing 0days

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

atlasc2

C# C2 Framework centered around Stage 1 operations

atomldr

A DLL loader with advanced evasive features

auto-gpt

An experimental open-source attempt to make GPT-4 fully autonomous.

awesome-azure-pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-redteam

一个红队知识仓库

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

backstab

A tool to kill antimalware protected processes

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active D

bc-csharp

BouncyCastle.NET Cryptography Library (Mirror)