apt4hax Goto Github PK

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

mass-effect

A tool that uses Masscan to identify open ports I have exploits for.

mavs

Mobile Application Vulnerability Scanner

netloader

Loads any C# binary in mem, patching AMSI + ETW.

orchard

JavaScript for Automation (JXA) tool to do Active Directory enumeration.

outlook-smb-tag-injector

Outlook plugin to inject HTML image tags referencing UNC file paths over SMB. Used to test for weak network egress filtering during penetration tests (SMB/port 445 allowed to the internet).

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

pki-escalate

Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Services and Enrollment Services ADCS containers to obtain Enterprise Administrator from Domain Administrator. Works by enabling a user to perform ESC1 (Enrolee supplying the SAN).

post-exploitation

Post Exploitation Collection

privesc

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

reaper

Reaper is a comprehensive OSINT tool desinged to scrape linkedin, perform additioanl user and domain enumeration, then perform google and github dorking for related code repositories.

reporeaper

sebackupprivilege

Use SE_BACKUP_NAME/SeBackupPrivilege to access objects you shouldn't have access to

sicd

Cisco Smart Install Exploit

smbmailbomb

A command line utility to test for SMB Forced Authentication

teamsphisher

Send phishing messages and attachments to Microsoft Teams users

tickey

Tool to extract Kerberos tickets from Linux kernel keys.

uber-apk-signer

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.

ubertooth

Software, firmware, and hardware designs for Ubertooth

usbproxy-legacy

A proxy for USB devices, libUSB and gadgetFS - this project is unmaintained, try here: https://github.com/usb-tools/Facedancer

windapsearch

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries