#
Lists (3)
Starred repositories
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
Tools and Techniques for Red Team / Penetration Testing
Frogy 2.0 is an automated external reconnaissance and Attack Surface Management (ASM) toolkit
PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.
Collection of scripts to retrieve stored passwords from Veeam Backup
A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities
Compiled Binaries for Ghostpack
Note: I am not responsible for any bad act. This is written by Chirag Artani to demonstrate the vulnerability.
Python 3 tool to view and edit PostgreSQL filenodes
Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers…
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability resea…
AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
Use ESC1 to perform a makeshift DCSync and dump hashes
Tool for Active Directory Certificate Services enumeration and abuse
EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual.
A massively parallel, high-level programming language
A massively parallel, optimal functional runtime in Rust
Some Rust program I wrote while learning Malware Development
Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀
Free universal database tool and SQL client