sho-luv Goto Github PK

adcs

Tools I glued together to automate adcs attacks

autoproc

I slightly modified code from https://gist.githubusercontent.com/knavesec/0bf192d600ee15f214560ad6280df556/raw/36ff756346ebfc7f9721af8c18dff7d2aaf005ce/autoProc.py which modified the wmiexe.py from the https://github.com/SecureAuthCorp/impacket library

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

bash_aliases

This is a collection of bash aliases I use. I just saved them here so others can use them as well.

bashbunny-payloads

Payloads for the Hak5 Bash Bunny

certipy

Tool for Active Directory Certificate Services enumeration and abuse

chatgpt-prompts-bug-bounty

ChatGPT Prompts for Bug Bounty & Pentesting

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

covenantlogs

Tool to parse Covenant.db to extract logs to be used in Red Team Operator Log

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

crimson-forge

Sustainable shellcode evasion

cve-2020-3452-exploit

Just a basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA appliances.

delegation_lab

This is a lab I built do test delegation attacks

favfreak

Making Favicon.ico based Recon Great again !

getmspatches

This is a ruby script I wrote to pull down all the Microsoft Security Bulletins so I can run stats on them locally.

github-slideshow

A robot powered training repository :robot:

gmailprobe

Gmail Enumeration using a glitch described here https://blog.0day.rocks/abusing-gmail-to-get-previously-unlisted-e-mail-addresses-41544b62b2

gmapsapiscanner

gpt_tools

These are tools I cheated with the help of ChatGPT to help me with Penetration Testing and Red Teaming

hashstat

Tool to analyze NTDS hashes and passwords

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jwt_server

I wrote to help test some JWT security issues. It will generate JWTs if requested, or check them if submitted

keyjacker

Keyjacker enumerates Mac keychains and displays plain text passwords.

lanturtle-modules

Module and Upgrade Repository for the Hak5 LAN Turtle

ldap_search

Python3 script to perform LDAP queries and enumerate users, groups, and computers from Windows Domains. Ldap_Search can also perform brute force/password spraying to identify valid accounts via LDAP.

ldaprelayscan

Check for LDAP protections regarding the relay of NTLM authentication

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

mass-effect

A tool that uses Masscan to identify open ports I have exploits for.

mavs

Mobile Application Vulnerability Scanner

monkey

Infection Monkey - An automated pentest tool