(2 Stars) (1 Fork) (0 indexierte Issues) (0 offene good first issues)
Repositories
dafthack Repositories
A basic PHP redirection site that captures request headers
(10 Stars) (4 Forks) (0 indexierte Issues) (0 offene good first issues)
Custom Query list for the Bloodhound GUI based off my cheatsheet
(7 Stars) (2 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/Check-LocalAdminHashPowerShell
Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of two of my favorite tools along with some of my own code. It utilizes Kevin Robertson's (@kevin_robertson) Invoke-TheHash project for the credential checking portion. Additionally, the script utilizes modules from PowerView by Will Schroeder (@harmj0y) and Matt Graeber (@mattifestation) to enumerate domain computers to find targets for testing admin access against.
(179 Stars) (34 Forks) (0 indexierte Issues) (0 offene good first issues)
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
(2.820 Stars) (553 Forks) (0 indexierte Issues) (0 offene good first issues)
Covenant is a collaborative .NET C2 framework for red teamers.
(6 Stars) (2 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/DomainPasswordSprayPowerShell
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
(2.053 Stars) (413 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/EmailAddressManglerPowerShell
This module mangles two lists of names together to generate a list of potential email addresses or usernames. It can also be used to simply combine a list of full names in the format (firstname lastname) into either email addresses or usernames.
(51 Stars) (17 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/EmpirePowerShell
Empire is a PowerShell and Python post-exploitation agent.
(8 Stars) (1 Fork) (0 indexierte Issues) (0 offene good first issues)
dafthack/EtherehamPython
A script for tracking and decoding input data messages sent to and from a particular Ethereum address or from every transaction in a block.
(9 Stars) (3 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/EyeWitnessPython
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
(4 Stars) (2 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/GraphRunnerPowerShell
A Post-exploitation Toolset for Interacting with the Microsoft Graph API
(1.296 Stars) (164 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/HostReconPowerShell
This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
(465 Stars) (120 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/MFASweepPowerShell
A tool for checking if MFA is enabled on multiple Microsoft Services
(1.555 Stars) (217 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/MSOLSprayPowerShell
A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.
(1.087 Stars) (185 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/MailSniperPowerShell
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
(3.240 Stars) (595 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/Misc-Powershell-ScriptsPowerShell
Random Tools
(19 Stars) (4 Forks) (0 indexierte Issues) (0 offene good first issues)
Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise
(3 Stars) (2 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/PassphraseGenPowerShell
A script for generating custom passphrase lists to be used for password cracking with hashcat rules
(82 Stars) (22 Forks) (0 indexierte Issues) (0 offene good first issues)
dafthack/Personal_AI_InfrastructureJavaScript
Personal AI Infrastructure for upgrading humans.
(1 Star) (1 Fork) (0 indexierte Issues) (0 offene good first issues)