gfoss

attacking-drupal

:fire: Scripts used to augment the penetration testing process of Drupal web applications.

CVE-2021-43326_Exploit

:boom: Automox Windows Agent Privilege Escalation Exploit

misc

:alien: miscellaneous scripts and things...

phpmyadmin_honeypot

:honey_pot: A simple and effective phpmyadmin honeypot

PowerShell-DL-Exec

:syringe: Download and Execute PowerShell scripts on remote hosts with ease.

PSRecon

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

Cloud-Hunter

Dynamically generate and hunt with Lacework LQL queries quickly and efficiently

PIE

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

gfoss/PSRecon

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

gfoss/attacking-drupal

:fire: Scripts used to augment the penetration testing process of Drupal web applications.

gfoss/phpmyadmin_honeypot

:honey_pot: A simple and effective phpmyadmin honeypot

gfoss/PowerShell-DL-Exec

:syringe: Download and Execute PowerShell scripts on remote hosts with ease.

gfoss/misc

:alien: miscellaneous scripts and things...

gfoss/PowerShell-Honeyport

A powershell script for creating a Windows honeyport.

gfoss/keybase-mail

:lock: Keybase-Mail.ps1 is a basic wrapper for the windows command-line version of keybase.io

gfoss/PIE

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

gfoss/Invoke-Hue

:rotating_light: PowerShell Philips Hue Integration and Automation

gfoss/Invoke-Wrike

:chart_with_upwards_trend: Wrike PowerShell API Integration and Automation

gfoss/the-book-of-secret-knowledge

A collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.

gfoss/CVE-2021-43326_Exploit

:boom: Automox Windows Agent Privilege Escalation Exploit

gfoss/abuse.ch_ransomware_scraper

Scrapes the indicator lists from abuse.ch's Ransomware Tracker.

gfoss/Empire

Empire is a PowerShell and Python post-exploitation agent.

gfoss/EvilOSX

A pure python, post-exploitation, RAT (Remote Administration Tool) for macOS / OSX.

gfoss/SIEM-Speak

:sound: 'Say' for Windows PowerShell

gfoss/Atomic-Parser

Python parser for Red Canary's Atomic Red Team Yamls

gfoss/atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

gfoss/Bella

A pure python, post-exploitation, data mining tool and remote administration tool for macOS.

gfoss/Pause-Process

PowerShell script which allows pausing\unpausing Win32/64 exes

gfoss/physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

gfoss/polarbearrepo

gfoss/research

gfoss/subTee-gits-backups

subTee gists code backups

gfoss/tau-tools

A repo containing tools developed by Carbon Black's Threat Research Team: Threat Analysis Unit

gfoss/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

gfoss/Cloud-Hunter

Dynamically generate and hunt with Lacework LQL queries quickly and efficiently

gfoss/LockBit-Black-Builder

gfoss/OverlayPwn

Bypass paywalls and related overlays

gfoss/pyWhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️