c0axx Goto Github PK

aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adfsdump

admodule

Microsoft signed ActiveDirectory PowerShell module

aggressor-scripts

Aggressor scripts for Cobalt Strike

aggressorcollection

Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors

aggressorscripts

ansible

Trying to learn ansible one error message at a time

apt-lab-fastopticssetup

Scripts to threat optics stack quickly / abbreviated and automated. Run after APT-Lab-Terraform

at-ps

Adversary Tactics - PowerShell Training

attacking-and-auditing-docker-containers-and-kubernetes-clusters

Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-cve-poc

✍️ A curated list of CVE PoCs.

beacon

Former attempt at creating a independent Cobalt Strike Beacon

bitcracker

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

bluehive

PowerShell based Active Directory Honey User Account Management with Universal Dashboards

bof-networkserviceescalate

Abuses the Shared Logon Session ID Issue (Described [here](https://www.tiraniddo.dev/2020/04/sharing-logon-session-little-too-much.html) by the awesome James Forshaw) To Achieve System From NetworkService. Can be used as a "getsystem" as well

bootdoor

Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

bucket-flaws

Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudcopy

This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.

cobaltstrike_services

AutoStart teamserver and listeners with services

cobaltstrikeparser

csharp_scripts

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost