dev0x41

Forks repos to track interesting and useful red team tools

Pinned Repositories

AADInternals
AADInternals PowerShell module for administering Azure AD and Office 365
Language:PowerShell00
AMSI-BYPASS
"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS
Language:PowerShell00
AMSI_patch
Patching AmsiOpenSession by forcing an error branching
Language:C++00
AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure
Language:PHP00
Azure-App-Tools
Collection of tools to use with Azure Applications
Language:HTML00
Bankai
Another Go Shellcode Loader using Windows APIs
Language:Go00
citrix-printer-exfil
POC to Exfiltrate Data from Citrix using Client Printer Redirection
Language:PowerShell00
cloud-service-enum
Language:Python00
CloudComparer
Compare the various managed cloud services offered by the major public cloud providers in the market.
Language:SCSS00
combobulator
Dependency Combobulator
Language:Python00

dev0x41's Repositories

dev0x41/AADInternals
AADInternals PowerShell module for administering Azure AD and Office 365
Language:PowerShell00
dev0x41/AMSI-BYPASS
"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS
Language:PowerShell00
dev0x41/AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure
Language:PHP00
dev0x41/cloud-service-enum
Language:Python00
dev0x41/combobulator
Dependency Combobulator
Language:Python00
dev0x41/CVE-2024-21413
Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
dev0x41/Get-UserSession
Query user sessions for the entire domain (Interactive/RDP etc), allowing you to query a Username and see all their logged on sessions, whether Active or Disconnected
Language:PowerShell
dev0x41/gscript
framework to rapidly implement custom droppers for all three major operating systems
Language:Go
dev0x41/Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Language:CSS
dev0x41/linux-smart-enumeration
Linux enumeration tool for pentesting and CTFs with verbosity levels
Language:Shell
dev0x41/MailSniper
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
Language:PowerShell
dev0x41/MicroBurst
A collection of scripts for assessing Microsoft Azure security
Language:PowerShell
dev0x41/nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
Language:Go
dev0x41/o365enum
Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
Language:Python
dev0x41/o365spray
Username enumeration and password spraying tool aimed at Microsoft O365.
Language:Python
dev0x41/P4wnP1_aloa
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
Language:JavaScript
dev0x41/pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
Language:Python
dev0x41/pico-tpmsniffer
A simple, very experimental TPM sniffer for LPC bus
Language:C
dev0x41/pingcastle
PingCastle - Get Active Directory Security at 80% in 20% of the time
Language:C#
dev0x41/pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
Language:Python
dev0x41/Pyramid
a tool to help operate in EDRs' blind spots
Language:Python0 0
dev0x41/pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Language:Python
dev0x41/Red-Teaming-Toolkit
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
dev0x41/Seatbelt
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
Language:C#
dev0x41/SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
dev0x41/ShellcodeEvasion
dev0x41/stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud.
Language:Go
dev0x41/TREVORspray
TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!
Language:Python
dev0x41/trivy
Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues
Language:Go
dev0x41/UltimateWDACBypassList
A centralized resource for previously documented WDAC bypass techniques