Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

This repository is a collection of powershell functions every hacker should know

PowerShell framework to assess Azure security

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

Red Team Attack Lab for TTP testing & research

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

Gather Open-Source Intelligence using PowerShell.

👥😈 Infect a pc with badusb and establish a connection through telegram.

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts that are expired, disabled locked out, or within 1 lockout attempt.

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)

InfoPath Phishing Repo Resource

Simple PoC in PowerShell for CVE-2023-23397

Small enough to carry on your back (Backpack) 🎒💻

PowerShell-powered Chrome password extractor for Windows 10

Misc resources for my daily pentesting...

Check passwords and hashes against the haveibeenpwned.com Pwned Passwords API using PowerShell

A quick command line utility that generates uses simple addition to obfuscate individual characters, then executes it