amasijr's Stars
charmbracelet/log
A minimal, colorful Go logging library 🪵
0x646e78/linux-credential-harvester
UNMAINTAINED - A script to harvest credentials from Linux systems
emptymonkey/shelljack
A keystroke / terminal logger for Linux.
emptymonkey/revsh
A reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.
emptymonkey/mimic
Hide processes as a normal user in Linux.
lu4p/ToRat
ToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
lanjelot/patator
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
ryhanson/phishery
An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
rapid7/metasploit-framework
Metasploit Framework
Ne0nd0g/merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
yaoyumeng/adore-ng
linux rootkit adapted for 2.6 and 3.x
ginuerzh/gost
GO Simple Tunnel - a simple tunnel written in golang
BishopFox/sliver
Adversary Emulation Framework
klsecservices/rpivot
socks4 reverse proxy for penetration testing
peass-ng/PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Hackingzone/winpirate
to grab or steal the password of systemAutomated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords Download git clone https://github.com/pourquoibenoit/WinPirate.git This project is still in progress Estimated Completion Date: soon…ish Here’s the plan. We create a way to automate doing the sticky keys windows hack from a bootable USB. Then, we automate getting as many saved passwords as possible, drop a listener, and delete all traces that we were there. All without being detected by antivirus we should add a mimikittenz option if the computer was found running and unlocked, otherwise we can just run it later remotely How to Use Requirements: a linux bootable USB, this repo on the USB (not in the OS, just put it in the root directory) chromepasswords.py requires PyWin32 If the computer is locked: 1) shutdown windows (make sure not hibernating by holding shift while pressing shut down) 2) hit F12 and select USB 3) sudo -i 4) fdisk -l (note: if you’re on Kali Linux, run parted -l) 5) mkdir /media/windows 6) mount /dev/WHATEVERTHEWINDOWSPARTITIONWASCALLED /media/windows -t ntfs 7) run Stickykeys.sh 8) restart and boot to Windows 9) hit Shift 5 times fast, a command prompt will appear 10) cd to the USB and run WinPirate.bat If the computer isn’t locked: cd to the USB and run Run.bat (this will run WinPirate.bat silently in the background, it should be done in < 10 seconds Current Issues 1) The chrome passwords grabber that I made is still a .py For it to work, I need to convert it to exe so it doesn’t require python to be installed on the system. You can run it with python chromepasswords.py -csv and it will decrypt the Chrome saved passwords database and export it as a CSV 2) The sticky keys automation doesn’t speed the process up as much as I previously thought, as evident by the lengthy “How to Use” section 3) I haven’t been able to write any tools that grab passwords for IE or Firefox Source: https://github.com/pourquoibenoit/WinPirate
ScottyRotten/pyrecon
A post exploitation enumeration tool for linux/unix devices that has Python 2.* installed
sevagas/swap_digger
swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.
zMarch/Orc
Orc is a post-exploitation framework for Linux written in Bash
EmpireProject/EmPyre
A post-exploitation OS X/Linux agent written in Python 2.7
n1nj4sec/pupy
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
d4rk007/RedGhost
Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.
hfiref0x/UACME
Defeating Windows User Account Control
0xdea/exploits
A handy collection of my public exploits, all in one place.
CUCyber/ja3transport
Impersonating JA3 signatures
airbus-seclab/ilo4_toolbox
Toolbox for HPE iLO4 & iLO5 analysis
jivoi/pentest
:no_entry: offsec batteries included
cowrie/cowrie
Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io
mitre/cti
Cyber Threat Intelligence Repository expressed in STIX 2.0
tonyghita/graphql-go-example
Example use of github.com/graph-gophers/graphql-go