Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

✭ 1,221

python security pentesting active-directory

7. Duckhunter

Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack

✭ 77

python

8. Gcat

A PoC backdoor that uses Gmail as a C&C server

✭ 1,196

python

9. Dhcpshock

Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug

✭ 72

python

10. Wifi Graper

Automatically get internetz from access points that have MAC based filtering enabled

✭ 41

python

11. Offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

✭ 960

nim

12. Byt3bl33d3r.github.io

Trying to take the dum-dum out of security

✭ 5

html

13. Sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

✭ 802

python python3 security security-tools pentesting

14. Crackmapexec

A swiss army knife for pentesting networks

✭ 5,445

python powershell windows pentesting active-directory networks

15. Witnessme

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

✭ 436

python python3 security security-tools osint chromium reconnaissance screenshots

16. Pth Toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

✭ 393

python

17. Offensivedlr

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

✭ 364

powershell dotnet security-tools

18. Mitmf

Framework for Man-In-The-Middle attacks