techbytom Goto Github PK

satellite

easy-to-use payload hosting

scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

scripts

Small scripts that make life better

sctpersistence

Create COM Objects backed by Scripts, not DLLs

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

sharpcradle

sharpersist

sharpexcel4-dcom

Port of Invoke-Excel4DCOM

shepherd

A Django application to help red team operators manage a library of domain names

simplescripts

Various shell scripts you might want in $PATH

simplytemplate

Phishing Template Generation Made Easy

skeletonkey

A simple bookmarklet for generating site-specific passwords.

socialfish

Educational Phishing Tool & Information Collector

starfighters

A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

tinymet

A "tiny" meterpreter stager

tl-trojan

A collection of source code for various RATs, Stealers, and other Trojans.

twitterbftd

Twitter Back From The Dead looks in a user tweets history for domain names that are available for registration

uhoh365

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

urbanbishoplocal

vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation

webkit-regex-exploit

weblogic_unserialize_exploit

java unserialize vul for weblogic exploit

website

BurbSec Prime Website

winpwn

Automation for internal Windows Penetrationtest / AD-Security

wireguard-install

WireGuard VPN server installer

xllpoc

Code Exec via Excel

ycsm

This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).