0xBrAinsTorM

0xBrAinsTorM's Stars

• terjanq/Tiny-XSS-Payloads

  A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

  Language:JavaScript2k198

• D35m0nd142/LFISuite

  Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

  Language:Python1.7k398

• ignis-sec/Pwdb-Public

  A collection of all the data i could extract from 1 billion leaked credentials from internet.

  3.1k404

• jseidl/usernamer

  Pentest Tool to generate usernames/logins based on supplied names.

  Language:Python3315

• peass-ng/PEASS-ng

  PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

  Language:C#16.5k3.1k

• christophetd/Adaz

  :wrench: Deploy customizable Active Directory labs in Azure - automatically.

  Language:HCL41085

• mxrch/penglab

  🐧 Abuse of Google Colab for cracking hashes.

  Language:Jupyter Notebook929141

• Flangvik/BetterSafetyKatz

  Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

  Language:C#845117

• Anon-Exploiter/SUID3NUM

  A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

  Language:Python614124

• snyk/zip-slip-vulnerability

  Zip Slip Vulnerability (Arbitrary file write through archive extraction)

  751116

• kmkz/Pentesting

  Tricks for penetration testing

  Language:PowerShell568150

• Flangvik/NetLoader

  Loads any C# binary in mem, patching AMSI + ETW.

  Language:C#806142

• kmkz/exploit

  Exploits and advisories

  Language:Perl18963

• pimps/ysoserial-modified

  That repository contains my updates to the well know java deserialization exploitation tool ysoserial.

  Language:Java17736

• AlDanial/cloc

  cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.

  Language:Perl20k1k

• NotSoSecure/Blacklist3r

  project-blacklist3r

  Language:C#51183

• pwntester/ysoserial.net

  Deserialization payload generator for a variety of .NET formatters

  Language:C#3.3k480

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.9k1.8k

• GreatSCT/GreatSCT

  The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

  Language:Python1.1k199

• dafthack/MSOLSpray

  A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

  Language:PowerShell924172

• nu11secur1ty/Windows10Exploits

  Microsoft » Windows 10 : Security Vulnerabilities

  Language:HTML899211

• 1N3/PowerExfil

  A collection of data exfiltration scripts for Red Team assessments.

  Language:PowerShell9731

• Kevin-Robertson/Powermad

  PowerShell MachineAccountQuota and DNS exploit tools

  Language:PowerShell1.3k177

• samratashok/RACE

  RACE is a PowerShell module for executing ACL attacks against Windows targets.

  Language:PowerShell21661

• t94j0/satellite

  easy-to-use payload hosting

  Language:Go26334

• sc0tfree/mentalist

  Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

  Language:Python1.8k245

• davidprowe/BadBlood

  BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

  Language:PowerShell2.1k273

• Kevin-Robertson/Invoke-TheHash

  PowerShell Pass The Hash Utils

  Language:PowerShell1.5k304

• 0xdea/tactical-exploitation

  Modern tactical exploitation toolkit.

  Language:Python839122

• sosdave/KeyTabExtract

  Extracts Key Values from .keytab files

  Language:Python23044