DevSecOps, ASPM, Vulnerability Management. All on one platform.

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

reNgine is an automated reconnaissance framework f

LLM vulnerability scanner

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

Azure DevOps Services Attack Toolkit

This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.

🌵 A charming TCP tunnel over WebSocket and Browser.

The Havoc Framework.

.NET/PowerShell/VBA Offensive Security Obfuscator

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

Burp Suite Certified Practitioner Exam Study

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

A collection of Azure AD tools for offensive and defensive security purposes

Graphical frontend to PS1-to-EXE-compiler PS2EXE.ps1

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

😱 A curated list of amazingly awesome OSINT

Obfuscated, FUD Simple PowerShell Reverse Shell One-Liner

WeirdAAL (AWS Attack Library)

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

Pentest dropbox setup scripts for Kali Linux

A tool for checking if MFA is enabled on multiple Microsoft Services

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.