PowerShell-Red-Team

PowerShell 红队侦查工具集 红队成员可用来从机器收集数据或获取目标访问权限的 PowerShell 函数集合。我已为 RedTeamEnum 模块中包含的命令添加了独立的 ps1 文件。这使您可以轻松查找并使用单一命令（如果您只需要一个）。如果您需要整个模块，请在下载 RedTeamEnum 目录及其内容到您的设备后执行以下操作。 root@kitploit: C:\PS robocopy .\RedTeamEnum $env:USERPROFILE\Documents\WindowsPowerShell\Modules\RedTeamEnum...

ADOKit

ADOKit 描述 Azure DevOps Services 攻击工具包 - ADOKit 是一款可利用 Azure DevOps Services 的 REST API 对其进行攻击的工具包。用户可以为相应的 Azure DevOps Services 实例指定攻击模块，同时提供有效的凭据（API 密钥或窃取的身份验证 Cookie）。支持的攻击模块包括侦察、权限提升和持久化。ADOKit 采用模块化设计，便于信息安全社区日后添加新模块。 有关 ADOKit 所用技术的完整详情，请参阅 X-Force Red 白皮书。 Black Hat USA Arsenal 2024 本仓库的...

aad-bofs

Este repositorio contiene una colección de BOFs para diversos ataques a Azure AD. Todos los BOFs han sido probados en batalla durante compromisos. Siéntete libre de contribuir también :...

THC-Archive

THC-Archive Todas las versiones del grupo de investigación en seguridad también conocido como hackers The Hacker's Choice Síguenos en Twitter: https://twitter.com/hackerschoice Lee más en Medium: https://medium.com/@hackerschoice ¿Por qué? porque ya no tenemos tiempo para operar un servidor web...

thc-ipv6

THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 root@kitploit: Licenciado bajo AGPLv3 ver archivo LICENSE INTRODUCCIÓN Este código fue inspirado cuando entré en contacto con IPv6, aprendí más y más sobre él, y luego no encontré herramientas par...

o365-attack-toolkit

o365-attack-toolkit 是什么 o365-attack-toolkit 允许操作者执行 OAuth 钓鱼攻击。 我们决定从静态定义的旧模式转向与账户进行完全“实时”交互。 一些变化 交互式邮件搜索 - 允许你像拥有完全访问权限一样搜索用户邮件。 发送邮件 - 允许你从用户邮箱发送包含附件的 HTML/TEXT 邮件。 交互式文件搜索和下载 - 允许你使用特定关键词搜索文件并离线下载。 文件替换 - 作为宏后门功能的替代方案实现。 架构 该工具包由几个组件组成 钓鱼端点 钓鱼端点负责提供执行 OAuth 令牌钓鱼的 HTML 文件。 后端服务...

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

clusterd

clusterd clusterd 是一个开源的应用服务器攻击工具包。由于对当前的指纹识别和利用方法感到不满，clusterd 自动化了应用服务器攻击中的指纹识别、侦察和利用阶段。更多信息请参见 wiki。 需求 Python = 2.7.x Requests = 2.2.x 安装 推荐的 clusterd 安装方式是克隆 Github 仓库 root@kitploit: git clone https://github.com/hatRiot/clusterd.git clusterd 特性 clusterd 目前支持六种不同的应用服务器平台，还有几种正处于开发和研究阶段 JBoss ...

Blackhat-USA-2022-Materials

Materiales de Presentación de Black Hat USA 2022 Materiales de presentación para mis charlas Briefing y Arsenal de Black Hat USA 2022 Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Descripción...

ADOKit - Azure DevOps Services Attack Toolkit

Azure DevOps Services Attack Toolkit - ADOKit is a toolkit that can be used to attack Azure DevOps Services by taking advantage of the available REST API. The tool allows the user to specify an attack module, along with specifying valid credentials API key or stolen authentication cookie for the...

GATOR - GCP Attack Toolkit For Offensive Research, A Tool Designed To Aid In Research And Exploiting Google Cloud Environments

GATOR - GCP Attack Toolkit for Offensive Research , a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to Impact. Modules Resource Category |...

Wodat - Windows Oracle Database Attack Toolkit

Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g. username as password, username list again...

SCMKit - Source Code Management Attack Toolkit

S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system. Currently, the SCM...

New Version of Eleonore Exploit Kit Released With New 0-Day Exploit

The creator of the infamous Eleonore exploit pack has released a new version of the attack toolkit, adding some new exploits, including one for a zero day vulnerability. The new version of Eleonore is selling for $2,000, a premium price even in the world of high-level exploit kits. Eleonore is on...