Starred repositories
Gram is Klarna's own threat model diagramming tool
AADInternals PowerShell module for administering Azure AD and Office 365
Tib3rius / windowsprivchecker
Forked from gladiatx0r/PowerlessWindows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
Deploy multiple instances of Nessus in docker containers easily
Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.
Collection of the cheat sheets useful for pentesting
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
Simple local scanner for vulnerable log4j instances
Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).
CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
Simple (relatively) things allowing you to dig a bit deeper than usual.
Automation for internal Windows Penetrationtest / AD-Security
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.
Privilege Escalation Enumeration Script for Windows
Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems
Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…
Rapidly Search and Hunt through Windows Forensic Artefacts
Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.