pyrohaz4good's Stars
christophetd/Adaz
:wrench: Deploy customizable Active Directory labs in Azure - automatically.
3ndG4me/AutoBlue-MS17-010
This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010
redcanaryco/atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
harleyQu1nn/AggressorScripts
Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
AutomatedLab/AutomatedLab
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.
brianhama/bad-asn-list
An open source list of ASNs known to belong to cloud, managed hosting, and colo facilities.
FSecureLABS/Azurite
Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
alphasoc/flightsim
A utility to safely generate malicious network traffic patterns and evaluate controls.
rapid7/metasploit-framework
Metasploit Framework
mattrajca/sudo-touchid
A fork of `sudo` with Touch ID support.
antisnatchor/phishlulz
Raikia/CredNinja
A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter
PowerShellMafia/PowerSCCM
PowerSCCM - PowerShell module to interact with SCCM deployments
orlyjamie/mimikittenz
A post-exploitation powershell tool for extracting juicy info from memory.
ZonkSec/persistence-aggressor-script
initial commit
jamiees2/dnsproxy
An awesome configuration generator for dns/proxy settings!
codypierce/hackers-grep
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
SpiderLabs/Responder
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
iagox86/dnscat2
PaulSec/twittor
A fully featured backdoor that uses Twitter as a C&C server
rowingdude/analyzeMFT
analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.
PowerShellEmpire/PowerTools
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
google/grr-doc
Documentation for the GRR Rapid Reponse framework