duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices...

GPOddity

GPOddity The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying and more. For more details regarding the attack and a demonstration on how to use the tool, see the associated article available at:...

GPOZaurr

GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

libpcap

LIBPCAP 1.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing. The documentation directory has README...

ad-password-protection

Lithnet Password Protection for Active Directory LPP enhances the options available to an organization wanting to ensure that all their Active Directory accounts have strong passwords. LPP is a module that you install on your Active Directory servers that uses a password filter to inspect passwor...

ad-ldap-enum

ad-ldap-enum ad-ldap-enum is a Python script developed to collect users/computers and their group membership from Active Directory. In large Active Directory environments, tools such as NBTEnum were not quick enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...

Group3r

by Mike Loss @mikeloss with help from @LukeHealy, @Sh3r4, and @LegendOfLynkle Development of Group3r was generously supported by my previous employer: OK BUT WTF IS IT DO? Like its ancestors, Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Polic...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

Attacker-Group-Predictor

Attacker-Group-Predictor The tool predicts attacker groups from techniques and softwares used. It searches based on the MITRE ATT&CK™ framework How it works? 1- Collect data from https://attack.mitre.org/ about attacker groups 2- Get data from user about attack 3- Compare data and create result...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

gpblib

GPBLib GPBLib는 GroupPolicyBackdoor, OUned 및 GPOddity 프로젝트에서 GPO 조작을 위해 사용되는 공통 코드를 포함합니다. 도구들을 본 라이브러리 사용으로 마이그레이션하는 작업은 아직 진행 중입니다...

CVE-2016-6366

CVE-2016-6366 Публичный репозиторий для улучшений эксплойта EXTRABACON — удалённого выполнения кода для Cisco ASA, написанного группой Equation Group NSA и опубликованного Shadow Brokers. Здесь представлены улучшенный шелл-код, скрипт для поиска смещений LINA, модуль Metasploit и extrabacon-2.0. ...

Grouper

Grouper DONT USE GROUPER ANY MORE. USE GROUPER2! https://github.com/l0ss/Grouper2 A PowerShell script for helping to find vulnerable settings in AD Group Policy. Photo by Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ Summary Grouper...

shocker

Shocker Инструмент для поиска и эксплуатации серверов, уязвимых для Shellshock Ссылка: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Выпущен как open source компанией NCC Group Plc - https://www.nccgroup.trust/ Разработано: Tom Watson, tom dot watson at nccgroup dot trust...

gpoParser

gpoParser gpoParser は、Active Directory 環境でグループポリシーオブジェクト GPO を通じて適用される構成を抽出・分析するために設計されたツールです。 これらの設定の列挙は退屈で時間がかかる可能性があるため、このツールは適用されたポリシーをより明確に理解し、横移動や権限昇格を可能にする危険な構成を特定するのに役立ちます。 これは leHack 2025 と DEFCON 33 で発表されました。 インストール 注: gssapi パッケージには依存関係が必要です: libkrb5-dev を sudo apt install libkrb5-dev...