Malwoverview.py is a first response tool to perform an initial and quick triage on either a directory containing malware samples or a specific malware sample.

Bitor Scanning Software

HackTheBox Certified Penetration Tester Specialist Cheatsheet

Phone number information lookup

Exchange your privileges for Domain Admin privs by abusing Exchange

GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows)

The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory Canary objects.

🔐 A CLI tool to extract server certificates

A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS

some prompt about cyber security

Practical Windows Forensics Training

A curated list of GPT agents for cybersecurity

Compatibility tool for Steam Play based on Wine and additional components

Control USB connected presence lights from multiple vendors via the command-line or web API.

Fast and stealth WordPress scanner, no api-key, no limitation. Use the top-notch free open-source API www.wpvulnerability.net I'm looking for contributors helping me to dev an auto-exploit module.

PowerShell script to DCSync NT-Hashes from an Active Directory Domain Controller (DC)

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

Perform DCSync operation without mimikatz

Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

Mailspoofsent is a Bash script that sends an email using the smtp.mailfrom and header.from addresses specified by the user. It also changes some configuration values that are required to spoof emai…

GrizzlyTunnel is a automation script designed to create seamless Layer 3 VPN like tunnels over SSH.

Sticky notes for pentesting, bug bounty, CTF.

Use ESC1 to perform a makeshift DCSync and dump hashes

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

MemProcFS

Links and guidance related to the return on mitigation report in the Microsoft Digital Defense Report

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

Just an AV slayer. Nothing special ;)