Pinned Repositories
Pentest-Tools
0xsp-Mongoose
a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.
Amsi-Bypass-Powershell
This repo contains some Amsi Bypass methods i found on different Blog Posts.
Certify
Active Directory certificate abuse.
Creds
Some usefull Scripts and Executables for Pentest & Forensics
DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
Get-System-Techniques
impacket
Impacket is a collection of Python classes for working with network protocols.
Internal-Monologue
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
Invoke-Evasion
PowerShell Obfuscation and Data Science
donesh's Repositories
donesh/WinPwn
Automation for internal Windows Penetrationtest / AD-Security
donesh/Amsi-Bypass-Powershell
This repo contains some Amsi Bypass methods i found on different Blog Posts.
donesh/OffensiveNim
My experiments in weaponizing Nim (https://nim-lang.org/)
donesh/Creds
Some usefull Scripts and Executables for Pentest & Forensics
donesh/impacket
Impacket is a collection of Python classes for working with network protocols.
donesh/Whisker
Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.
donesh/SharpNamedPipePTH
Pass the Hash to a named pipe for token Impersonation
donesh/PSPKIAudit
PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.
donesh/Rubeus
Trying to tame the three-headed dog.
donesh/DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
donesh/Certify
Active Directory certificate abuse.
donesh/Seatbelt
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
donesh/RPC-Backdoor
A basic emulation of an "RPC Backdoor"
donesh/SharpUp
SharpUp is a C# port of various PowerUp functionality.
donesh/Get-System-Techniques
donesh/Invoke-Evasion
PowerShell Obfuscation and Data Science
donesh/OffensiveVBA
This repo covers some code execution and AV Evasion methods for Macros in Office documents
donesh/log4j-scan
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
donesh/test
donesh/PowerSharpPack
donesh/0xsp-Mongoose
a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.
donesh/Pentest-Tools
donesh/SafetyKatz
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
donesh/Internal-Monologue
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS