nyxgeek
Follow
Stars
A set of prioritized Hashcat .hcmask files intelligently developed from terabytes of password breach datasets and organized by run time.
Markov-chains for linguistically-correct password cracking
Password attacks and MFA validation against various endpoints in Azure and Office 365
aquatone results for sites with bug bountys
A python script to concurrently run awscli commands across multiple accounts
Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot
Security risk analysis for Kubernetes resources
A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
A slightly more fun way to disable windows defender + firewall. (through the WSC api)
Unorthodox and stealthy way to inject a DLL into the explorer using icons
Research into Undocumented Behavior of Azure AD Refresh Tokens
Most government websites end in .gov or .mil, but many do not. This repo contains USA.gov's list of public government domains and URLs that don't end in .gov or .mil.
A collection of all .edu domains and information about them.
📡 PoC auto collect from GitHub.
Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
Vulnerability checker for Callstranger (CVE-2020-12695)
A collection of GPT system prompts and various prompt injection/leaking knowledge.
DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).
A lightweight LDAP server for development, home use, or CI
Collection of malware source code for a variety of platforms in an array of different programming languages.
Unauthenticated enumeration of AWS, Azure, and GCP Principals
Scan for misconfigured S3 buckets across S3-compatible APIs!
Recreating After Dark screensavers in CSS.