alexlinov Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

alexlinov

amnesiac-post-exploit-framework

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist Penetration Testers and Red Teams with lateral movement within Active Directory environments

binchecker

Identify service binaries and non-service binaries with misconfigured permissions

collection-of-built-binaries

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

collection-of-notes

Collection of notes I find useful. maybe someone else can too.

compiled-binaries

Pre-compiled binaries to save time and not deal with dotnet shenanigans.

dhcp-search

Quick and dirty PowerShell Script to find an IP lease in all DHCP Scopes

easy-json

Easily extract objects from JSON

easy-scan

Automatically extracts unique port numbers and initiates a comprehensive scan on a list of IP addresses

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

invoke-adenum

Automate Active Directory Enumeration using PowerView

ioc-generator

IOC Generator for Microsoft Defender for Endpoints

ip-scanner

Scans a range of IP Addresses and resolve them to hostnames, if applicable.

microsoft-365-defender-hunting-queries

Sample queries for Advanced Threat Hunting

mimipenguin

A tool to dump the login password from the current linux user

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

multi-query

Identify malicious IPs by quering TCP Connections against VirusTotal API.

obfuscated-revshell

This a a reverse shell using different obfuscated methods only connects to localhost!!

obfuscatedsharpcollection

Attempt at Obfuscated version of SharpCollection

offensive-reverse-shell-cheat-sheet

Collection of reverse shells for red team operations, penetration testing, and offensive security.

open-source-scanners

A list of open source web security scanners

pentest-pivoting

A compact guide to network pivoting for penetration testings / CTF challenges.

pizzahunt

Scans for indications of an XSS, Oracle SQLi and filters out words containing MySQL.

sharpmapexec

sharpreflectivepeinjection

reflectively load and execute PEs locally and remotely bypassing EDR hooks

sipxcom-rce

sipXopenfire 21.04 Remote Command Execution / Weak Permissions

subdomain-enumeration

Passive enumeration of subdomains

vpn-checker

VPNAPI.io Query to check if list of IP Addresses belong to VPN, Tor, Proxy or Relay services.