Pinned Repositories
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
MailSniper
forked from dafthack
nps_payload
This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091) Payload written by Ben Mauch (@Ben0xA) aka dirty_ben
PCI-DSS-Compliance-Toolkit
The PCI DSS Compliance Toolkit is an open-source project aimed at helping organizations achieve and maintain compliance with the (PCI DSS). This toolkit provides essential resources, tools, and documentation to streamline the compliance process, ensuring the secure handling of cardholder data.
PowerMeta
forked from dafthack
randomrepo
Repo for random stuff
scripts-tools-shells
SprayingToolkit
Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient.
thc-ipv6
acknowledgeHim's Repositories
acknowledgeHim/PCI-DSS-Compliance-Toolkit
The PCI DSS Compliance Toolkit is an open-source project aimed at helping organizations achieve and maintain compliance with the (PCI DSS). This toolkit provides essential resources, tools, and documentation to streamline the compliance process, ensuring the secure handling of cardholder data.
acknowledgeHim/adaudit
Powershell script to do domain auditing automation
acknowledgeHim/aclpwn.py
Active Directory ACL exploitation with BloodHound
acknowledgeHim/AQUARMOURY
My musings in C and offensive tooling
acknowledgeHim/awesome-yara
A curated list of awesome YARA rules, tools, and people.
acknowledgeHim/azucar
Security auditing tool for Azure environments
acknowledgeHim/Azure-AD-Password-Checker
Azure AD Password Checker
acknowledgeHim/cloudsploit
Cloud Security Posture Management (CSPM)
acknowledgeHim/CME-Module-info
CrackMapExec module checks LOG files (combination IP and Hostname) when connected to the system and prints login information from logs.
acknowledgeHim/crackerjack
CrackerJack / Hashcat Web Interface / Context Information Security
acknowledgeHim/dissect
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
acknowledgeHim/github-dorks
Find leaked secrets via github search
acknowledgeHim/GOAD
game of active directory
acknowledgeHim/HELi
Multicore EVTX to Elasticsearch ingestor for incident responders.
acknowledgeHim/PANhunt
PANhunt searches for credit card numbers (PANs) in directories.
acknowledgeHim/PCI-Audit-Script
acknowledgeHim/PENTESTING-BIBLE
articles
acknowledgeHim/PetitPotam
acknowledgeHim/Powershell-PCI-Compliance
This Powershell script can be used to configure the local computer policy to the configurations specified in the Tenable PCI Compliance Audit file (https://www.tenable.com/downloads/audit).
acknowledgeHim/prowler
Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
acknowledgeHim/pyGPOAbuse
Partial python implementation of SharpGPOAbuse
acknowledgeHim/Responder
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
acknowledgeHim/ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
acknowledgeHim/sccmhunter
acknowledgeHim/ScoutSuite
Multi-Cloud Security Auditing Tool
acknowledgeHim/singularity
A DNS rebinding attack framework.
acknowledgeHim/snafflepy
Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler
acknowledgeHim/Tekium-PAN-Hunter-Script
Easy search of possible PAN's for Windows and Linux systems.
acknowledgeHim/the-practical-linux-hardening-guide
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
acknowledgeHim/windows-coerced-authentication-methods
A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.