hardwaterhacker

hardwaterhacker's Stars

• lc/gau

  Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

  Language:Go3.9k49100436

• mgeeky/Penetration-Testing-Tools

  A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

  Language:PowerShell2.5k846495

• codingo/Reconnoitre

  A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

  Language:Python2.1k8953457

• Mr-Un1k0d3r/EDRs

  Language:C2k685348

• threatexpress/domainhunter

  Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

  Language:Python1.5k6025287

• 0x00-0x00/ShellPop

  Pop shells like a master.

  Language:Python1.4k5016236

• aahmad097/AlternativeShellcodeExec

  Alternative Shellcode Execution Via Callbacks

  Language:C++1.4k422295

• eladshamir/Internal-Monologue

  Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

  Language:C#1.4k570242

• matterpreter/OffensiveCSharp

  Collection of Offensive C# Tooling

  Language:C#1.4k397243

• gwen001/github-search

  A collection of tools to perform searches on GitHub.

  Language:Python1.3k3830339

• tenable/poc

  Proof of Concepts

  Language:Python1.2k1140315

• vysecurity/LinkedInt

  LinkedIn Recon Tool

  Language:Python1.1k3223200

• mvelazc0/defcon27_csharp_workshop

  Writing custom backdoor payloads with C# - Defcon 27 Workshop

  Language:C#1.1k231261

• RedSiege/WMImplant

  This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

  Language:PowerShell798544143

• bats3c/darkarmour

  Windows AV Evasion

  Language:Python7271410119

• skahwah/SQLRecon

  A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

  Language:C#620612108

• proxycannon/proxycannon-ng

  A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference

  Language:Shell6033112102

• Raikia/UhOh365

  A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

  Language:Python588238101

• fortra/No-Consolation

  A BOF that runs unmanaged PEs inline

  Language:C4954258

• Dec0ne/DllNotificationInjection

  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

  Language:C++4312275

• brandonprry/gray_hat_csharp_code

  This repository contains full code examples from the book Gray Hat C#

  Language:C#380310125

• fin3ss3g0d/cypherhound

  Python3 terminal application that contains 405 Neo4j cyphers for BloodHound data sets and 388 GUI cyphers

  Language:Python3716129

• ustayready/SharpHose

  Asynchronous Password Spraying Tool in C# for Windows Environments

  Language:C#30610461

• rvrsh3ll/CPLResourceRunner

  Run shellcode from resource

  Language:C#24915267

• r4wd3r/RID-Hijacking

  Windows RID Hijacking persistence technique

  Language:PowerShell16411243

• tevora-threat/PowerView3-Aggressor

  Cobalt Strike Aggressor script menu for Powerview/SharpView

  1265040

• rhodejo/OSCP-Prep

  9314031

• skelsec/CVE-2017-12542

  Test and exploit for CVE-2017-12542

  Language:Python846036

• werdhaihai/SharpAltShellCodeExec

  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke

  Language:C#742014

• thalpius/Microsoft-Defender-for-Identity-Check-Instance

  This script gets all accepted domains in Microsoft 365 using autodiscover, gets the tenant name and checks if there is a Microsoft Defender for Identity instance. This way you can figure out if a company runs Microsoft Defender for Identity.

  Language:PowerShell21101