nimux

Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...

CVE-2025-0994

CVE-2025-0994 How does this detection method work? This Nuclei template extracts the version stored in the HTML body and based on the version we can determine whether the instance is vulnerable to CVE-2025-0994 or not. Patched version: 15.8.9 How do I run this script? 1. Download Nuclei from here...

HTTP-Basma

Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation HTTP-Basma is live at https://httpbasma.netomize.ca/ Introduction In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability...

CVE-2021-31159

Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration CVE-2021-31159 This script takes advantage of ServiceDesk Plus before build 10519 having different output in the password recovery functionality: if the user exists it returns a message claiming an email has been sent but ...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

Java-Deserialization-Scanner

Java Deserialization Scanner Java Deserialization Scanner is a Burp Suite plugin aimed at detect and exploit Java deserialization vulnerabilities. It was written by Federico Dotta, Principal Security Analyst at HN Security. The plugin is made up of three different components: 1. Integration with...

CVE-2026-41089-Netlogon

🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Official security verification module for the AI Security Tool Ecosystem 🌐 Demo • 📚 Project Website • 💬 Community Chat Site Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview I am publishing a detailed...

HomeLab

HomeLab - Network Documentation Overview HomeLab is a GNS3 lab built on a single laptop OMEN 16, i7-14650HX, 32 GB RAM, RTX 4060 8 GB to practice networking, systems administration, and offensive security in one environment. It models a perimeter with a firewall Cisco ASAv, a DMZ Ubuntu Server, a...

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

AD-description-password-finder

AD description password finder The purpose of this tool is to check if passwords are stored in clear text in the description of Active Directory accounts. The requirements are : having a copy of the ntds.dit and SYSTEM hive If you don't have python, you can use the .exe version of the scripts in...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

log4j-honeypot-flask

log4j-honeypot-flask Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228 This can be installed on a workstation or server, either by running the Python app/app.py script directly you'll need python3, Flask, and Requests or as a Dock...

caOptics

Note Project archived due to shifting development priorities and refocusing my community efforts to other areas PoCs, other tools and demos/presentation, project is set to read-only. CA Optics - Azure AD Conditional Access Gap Analyzer What is Conditional Access? Notes for early testers Release...

CVE-2022-23342

CVE-2022-23342 Security Advisory – Username Enumeration in OnBase Affected software versions and builds: OnBase Application Server OnBase releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are impacted. Fixed software versions and builds: OnBase EP3 releases great...

Grouper

Grouper DONT USE GROUPER ANY MORE. USE GROUPER2! https://github.com/l0ss/Grouper2 A PowerShell script for helping to find vulnerable settings in AD Group Policy. Photo by Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ Summary Grouper...

ntdsdotsqlite

NTDS.Sqlite This software can be used either directly as a CLI utility or as a library to get an SQLite database from an NTDS.DIT one. Encrypted bits can be decrypted if the associated system hive is provided altogether. Installation python -m pip install ntdsdotsqlite Usage ntdsdotsqlite NTDS.DI...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

spycast

SpyCast is a crossplatform mDNS enumeration tool that can work either in active mode by recursively querying services, or in passive mode by only listening to multicast packets. Building cargo build --release OS specific bundle packages for example dmg and app bundles on OSX can be built via: car...

SharpSpray

SharpSpray This project is a C port of my PowerSpray.ps1 script. SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike. https://github.com/jnqpblc/Misc-PowerShell/blob/master/PowerSpray.ps1 By default it wi...

ACLight

ACLight A tool for advanced discovery of Privileged Accounts - including Shadow Admins. ACLight2 is the improved version of the tool. Shadow Admins Research The tool version 1 was published as part of the "Shadow Admins" research - more details on "Shadow Admins" are in the blog post:...