😺 Running Hashcat on Google Colab with session backup and restore.

Collection of PoC and offensive techniques used by the BlackArrow Red Team

A Python based ingestor for BloodHound

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Tips and Tutorials for Bug Bounty and also Penetration Tests.

A repository with 3 tools for pwn'ing websites with .git repositories available

Capture the flag challenges

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Windows / Linux Local Privilege Escalation Workshop

Various *nix tools built as statically-linked binaries

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

Codebase to generate an msdt-follina payload

Defeating Windows User Account Control

A swiss army knife for pentesting networks

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

A fast TCP/UDP tunnel over HTTP

Notes and resources for the Active Directory YouTube series on https://youtube.com/JohnHammond010

C++ python bytecode disassembler and decompiler

Recovers passwords from pixelized screenshots

Six Degrees of Domain Admin

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Starkiller is a Frontend for PowerShell Empire.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Linux privilege escalation auditing tool

Scripted Local Linux Enumeration & Privilege Escalation Checks

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…