Check-LocalAdminHash

Check-LocalAdminHash Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

Sherlock

Deprecated. Have a look at Watson instead. Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool...

Zerodoor

ZeroDoor A script written lazily for generating reverse shell backdoors on the go whenever you need without any hassle for your daily penetration needs . These backdoors are not james bond high tech stuff but rather simple ones to prevent over exploitation and limited capabilities Once you genera...

MSOLSpray

MSOLSpray A password spraying tool for Microsoft Online accounts Azure/O365. The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled. BE VERY CAREFUL NOT TO LOCKOUT...

Tater

Tater Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. Credit All credit goes to @breenmachine, @foxglovesec, Google Project Zero, and anyone else that helped work out the details for this exploit. Potato - https://github.com/foxglovesec/Potato Included...

Powershell-RAT

Powershell-RAT Python based backdoor that uses Gmail to exfiltrate data as an e-mail attachment. This RAT will help someone during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends the information to an attacker as an e-mail...

NorkNork

NorkNork - Tool for identifying Empire persistence payloads https://www.n00py.io/2017/01/removing-backdoors-powershell-empire-edition/ ABOUT: This script was designed to identify Powershell Empire persistence payloads on Windows systems. It currently supports checks for these persistence methods:...

PowerShellArsenal

PowerShellArsenal is a PowerShell module used to aid a reverse engineer. The module can be used to disassemble managed and unmanaged code, perform .NET malware analysis, analyze/scrape memory, parse file formats and memory structures, obtain internal system information, etc. PowerShellArsenal is...

clrinject

clrinject Injects C EXE or DLL Assembly into any CLR runtime and AppDomain of another process. The injected assembly can then access static instances of the injectee process's classes and therefore affect it's internal state. Usage clrinject-cli.exe -p -a Opens process with id or name , inject EX...

FakeImageExploiter

FakeImageExploiter v1.4 - backdoor images.jpg.ps1 root@kitploit: Codename: Metamorphosis Versione rilascio: v1.4 Stable Autore: pedro ubuntu r00t-3xp10it Distribuzioni supportate : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 Dichiarazione legale:...

Phirautee

Phirautee Un virus crittografico proof of concept per diffondere la consapevolezza tra gli utenti sugli attacchi e le implicazioni dei ransomware. Phirautee è scritto puramente in PowerShell e non richiede librerie di terze parti. Questo strumento ruba le informazioni, tiene in ostaggio i dati di...

secure-boot-cert-servicing

Rotazione dei certificati Secure Boot — valutazione e manutenzione Un singolo script PowerShell autonomo che valuta la posizione dei certificati Secure Boot di una macchina Windows per la rotazione 2011 → 2023 CVE-2023-24932 / KB5025885 e, solo quando glielo chiedi esplicitamente, attiva l'opt-in...

nishang

Nishang Nishang è un framework e una raccolta di script e payload che consente l'uso di PowerShell per la sicurezza offensiva, i penetration test e il red teaming. Nishang è utile durante tutte le fasi del penetration testing. Di Nikhil Mittal Fondatore di Altered Security - Formazione pratica su...

PSPKIAudit

PSPKIAudit PowerShell-Toolkit zur Überwachung von Active Directory Certificate Services AD CS. Es basiert auf dem PKISolution PSPKI-Toolkit Microsoft Public License. Dieses Repository enthält eine neuere Version von PSPKI als die in der PSGallery verfügbare siehe das PSPKI-Verzeichnis. Vadims...

LAPSToolkit

LAPSToolkit Funzioni scritte in PowerShell che sfruttano PowerView per auditare e attaccare ambienti Active Directory in cui è stata implementata la soluzione Local Administrator Password Solution LAPS di Microsoft. Include la ricerca di gruppi delegati specificamente dagli amministratori di...

Get-log4j-Windows-local

Get-log4j-Windows-local.ps1 Identifica tutti i componenti log4j su un singolo server Windows locale. CVE-2021-44228. Una copia per uso singolo - vedere https://github.com/KeysAU/Get-log4j-Windows.ps1 per più computer. Apache log4j CVE-2021-44228 Esecuzione dello script: Esportazione: Colonne A - ...

BadBlood

BadBlood BadBlood di Secframe riempie un dominio di Microsoft Active Directory con una struttura e migliaia di oggetti. L'output dello strumento è un dominio simile a un dominio del mondo reale. Dopo l'esecuzione di BadBlood su un dominio, gli analisti e gli ingegneri della sicurezza possono...

powerview.py

Instalação | Uso Básico | Ofuscação | Módulos | Registro de Logs | Regras Definidas pelo Usuário | MCP | Plugins | Agradecimentos Visão Geral PowerView.py é uma alternativa ao incrível script original PowerView.ps1. A maioria dos módulos usados no PowerView está disponível aqui algumas das flags...

ADModule

ADModule DLL firmata da Microsoft per il modulo PowerShell ActiveDirectory Solo un backup del modulo PowerShell ActiveDirectory di Microsoft da Server 2016 con RSAT e modulo installati. La DLL si trova solitamente in questo percorso:...