dafthack's Stars
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
PowerShellMafia/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
BloodHoundAD/BloodHound
Six Degrees of Domain Admin
EmpireProject/Empire
Empire is a PowerShell and Python post-exploitation agent.
mandiant/commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
RedSiege/EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
bluscreenofjeff/Red-Team-Infrastructure-Wiki
Wiki to collect Red Team infrastructure hardening resources
toolswatch/blackhat-arsenal-tools
Official Black Hat Arsenal Security Tools Repository
epinna/tplmap
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
trustedsec/unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
dafthack/MailSniper
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
dafthack/DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
sense-of-security/ADRecon
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
ustayready/CredSniper
CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
EmpireProject/EmPyre
A post-exploitation OS X/Linux agent written in Python 2.7
mdsecactivebreach/Chameleon
Chameleon: A tool for evading Proxy categorisation
CredDefense/CredDefense
Credential and Red Teaming Defense for Windows Environments
dafthack/PassphraseGen
A script for generating custom passphrase lists to be used for password cracking with hashcat rules