optiv Goto Github PK

aircross

airCross is a tool that takes advantage of API functionality within VMWare's AirWatch MDM solution to perform single-factor authentication attacks. airCross can locate AirWatch authentication endpoint, validate the authentication strategy of the environment, collect GroupID authentication values, conduct single-factor authentication, and perform user enumeration, in some instances.

android-ndk-crackme

A simple NDK-based application on which to demonstrate some important attack strategies.

azure-api-management-tracing-helper

azure_runbooks

badoutlook

(kinda) Malicious Outlook Reader

blemon

Universal BLE Monitoring with Frida (or Objection)

burp-ibm-websphere-portlet-decoder

BurpSuite plugin for decoding IBM WebSphere Portlet States

burp-java-deserializer

burp-reset-a-tron

reset-a-tron Burp extension

burpshellshock

Shellshock scanner for Apache MOD_CGI

captcha-solve

checkpassword-.net

HIBP Pwned Passwords API Client for .NET apps

checkpassword-java

HIBP Pwned Passwords API client for Java projects

cve-2020-15931

Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability

datp_queries

Microsoft Defender ATP Advanced Hunting Queries

dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

doppelganger

Doppelgänger is firmware that runs on ESP32 devices that can be embedded within commercially available RFID readers with the intent of capturing access control card data while performing physical security assessments. Doppelgänger keeps the operator's ease of access, maintenance, and operational communications in mind.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

go365

An Office365 User Attack Tool

insecureshop

An Intentionally designed Vulnerable Android Application built in Kotlin.

ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

knockknock

Enumerate valid users within Microsoft Teams and OneDrive with clean output.

lightning-action-editor

luhn-calculator

A very simple Burp extension to make it easier to enumerate credit cards in the Intruder.

mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

microsoft365_devicephish

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

mobile-nuclei-templates

netneedle

Network based steganography based control channels and chat.