ch1jske1

ch1jske1's Stars

• grimlockx/ADCSKiller

  An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

  Language:Python69768

• ihebski/DefaultCreds-cheat-sheet

  One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

  Language:Python5.6k683

• S3cur3Th1sSh1t/SharpNamedPipePTH

  Pass the Hash to a named pipe for token Impersonation

  Language:C#29253

• Anteste/WebMap

  A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

  Language:Python28758

• davidprowe/BadBlood

  BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

  Language:PowerShell2k273

• HarmJ0y/CheatSheets

  Cheat sheets for various projects.

  1k205

• BloodHoundAD/SharpHound2

  The Old BloodHound C# Ingestor (Deprecated)

  Language:C#509113

• CompassSecurity/BloodHoundQueries

  Language:Python60373

• byt3bl33d3r/OffensiveNim

  My experiments in weaponizing Nim (https://nim-lang.org/)

  Language:Nim2.8k351

• BishopFox/sliver

  Adversary Emulation Framework

  Language:Go8.3k1.1k

• six2dez/OneListForAll

  Rockyou for web fuzzing

  Language:Shell2.6k463

• initstring/passphrase-wordlist

  Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

  Language:Python1.2k161

• nil0x42/duplicut

  Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

  Language:C86489

• atredispartners/flamingo

  Flamingo captures credentials sprayed across the network by various IT and security products.

  Language:Go45145

• Flangvik/SharpCollection

  Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

  2.3k330

• dirkjanm/mitm6

  pwning IPv4 via IPv6

  Language:Python1.7k246

• tijldeneut/Security

  General Security Scripts

  Language:Python12939

• infosecn1nja/MaliciousMacroMSBuild

  Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.

  Language:Python492118

• Orange-Cyberdefense/arsenal

  Arsenal is just a quick inventory and launcher for hacking programs

  Language:Python3.2k463

• FSecureLABS/SharpGPOAbuse

  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

  Language:C#1k136

• BankSecurity/Red_Team

  Some scripts useful for red team activities

  Language:PowerShell1.6k364

• systeminsecure/Documents

  2

• m4l1c3/kali-setup

  setup script for a fresh kali install

  Language:Python1

• odedshimon/BruteShark

  Network Analysis Tool

  Language:C#3k328

• yogeshojha/rengine

  reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

  Language:HTML7.4k1.1k

• Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

  Language:PowerShell2.5k487

• shelld3v/JSshell

  JSshell - JavaScript reverse/remote shell

  Language:Python597109

• allanlw/svg-cheatsheet

  A cheatsheet for exploiting server-side SVG processors.

  67392

• payloadbox/xss-payload-list

  🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

  6.2k1.7k

• login-securite/lsassy

  Extract credentials from lsass remotely

  Language:Python2k244