Gram is Klarna's own threat model diagramming tool

The swiss army knife of LSASS dumping

AADInternals PowerShell module for administering Azure AD and Office 365

Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Deploy multiple instances of Nessus in docker containers easily

game of active directory

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

Collection of the cheat sheets useful for pentesting

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Simple local scanner for vulnerable log4j instances

Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

Simple (relatively) things allowing you to dig a bit deeper than usual.

Automation for internal Windows Penetrationtest / AD-Security

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

Privilege Escalation Enumeration Script for Windows

Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

erlang based secure reverse shell

Rapidly Search and Hunt through Windows Forensic Artefacts

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

JAWS - Just Another Windows (Enum) Script