#Framework

Adds a computer account to domain.

Network-wide ads & trackers blocking DNS server.

Go CLI and Library for quickly mapping organization network ranges using ASN information.

Cache mode.

Exploit Remote Procedure Calls (RPC).

Own stuff using FTP.

Own stuff using FTP.

Use Kerberos U2U to submit a TGS request for yourself.

Linux Privilege Escalation Awesome Script.

Work with gowitness reports.

Synchronize config from one AdGuardHome instance to another.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple probes using retryabledns library.

Queries target domain for delegation relationships.

For research purposes - fuzz Remote Procedure Calls (RPC).

Gets an S4U2self ticket impersonating given user.

Own stuff using LDAP

LDAP mode.

Own stuff using LDAP.

Perform various scans using sources such as a file, Nmap XMLs, Nessus exports, or by scanning network CIDR ranges.

Windows local Privilege Escalation Awesome Script.

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment..

Queries target domain for users with 'Do not require Kerberos preauthentication' set and export their TGTs for cracking. (ASREPRoasting)

Requests a TGT using Kerberos PKINIT and either a PEM or PFX based certificate+key.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Own stuff using MSSQL

Owning stuff using MSSQL.

Assess the Remote Procedure Calls (RPC) listening.

Arsenal is just a quick inventory, reminder and launcher for pentest commands.

Frameworks.

Given a password, hash or aesKey, it will request a Service Ticket and save it as ccache.

Own stuff using NFS.

Own stuff using RDP.

Queries target domain for SPNs that are running under a user account (kerberoasting).

Own stuff using RDP.

Own stuff using SMB.

Uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.

For every connection received, this module will try to relay that connection to specified target(s) system or the original client.

Own stuff using SMB.

Own stuff using SSH.

Subfinder is a subdomain discovery tool that discovers subdomains for websites by using passive online sources.

Python based ingestor for BloodHound.

PSEXEC like functionality example using RemComSvc.

Own stuff using SSH.

Own stuff using WinRM.

Active Directory Privilege Escalation Framework.

Database containing credentials captured.

Test whether an account is valid on the target host using the RDP protocol.

Own stuff using VNC.

CDK is an open-sourced container penetration toolkit, designed for offering stable exploitation in different slimmed containers without any OS dependency.

This script downloads the list of users for the target system.

Own stuff using WinRM.

Fully automated decryption/decoding/cracking tool using natural language processing & artificial intelligence, along with some common sense.

Performs various techniques to dump secrets from the remote machine without executing any agent there.

Own stuff using WMI.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

Database containing credentials captured.

SMB client implementation.

A swiss army knife for pentesting networks.

PSEXEC over SMB.

The Cyber Swiss Army Knife.

Dumping revelant information on compromised targets without AV detection.

Relay SMB traffic.

This shell is the ultimate WinRM shell for hacking/pentesting.

This script will launch a SMB Server and add a share specified as an argument. You need to be root in order to bind to port 445. For optional authentication, it is possible to specify username and password or the NTLM hash.

GoodHound operationalises Bloodhound by determining the busiest paths to high value targets and creating actionable output to prioritise remediation of attack paths.

Creates a Kerberos golden/silver tickets based on user options.

A website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line.

Executes a semi-interactive shell using Windows Management Instrumentation.

The world's fastest framework for building websites.

Is a collection of Python classes for working with network protocols.

In-depth ldap enumeration utility.

Swiss-Army knife for Active Directory Pentesting using Linux.

Python library to remotely extract credentials on a set of hosts.

The world's most used penetration testing framework.

Is a tool I've made to learn C and make somes experiments with Windows security.

mitm6 is a pentesting tool that exploits the default configuration of Windows to take over the default DNS server.

MSFvenom is a combination of Msfpayload and Msfencode, putting both of these tools into a single Framework instance. msfvenom replaced both msfpayload and msfencode as of June 8th, 2015.

An interactive cheatsheet tool for the command-line and application launchers.

The Network Execution Tool.

Privilege Escalation Awesome Scripts SUITE new generation.

A black hole for Internet advertisements. Network-wide (DNS-based) Ad Blocking.

PingCastle - Get Active Directory Security at 80% in 20% of the time.

Tools for Kerberos PKINIT and relaying to AD CS.

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

Security Through Intelligent Automation.

Mimikatz implementation in pure Python. At least a part of it :)

Multi-Cloud Security Auditing Tool.

SearchSploit gives you the power to perform detailed off-line searches through your locally checked-out copy of the repository.

RDP credential sniffer - Man in the Middle RDP

Script that visualizes subdomains for the domain you want.

Wi-Fi Exploitation Framework.

Rewrite of the popular wireless network auditor, 'wifite' - automated wireless auditor.