This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.
☆465Oct 3, 2017Updated 9 years ago
Alternatives and similar repositories for HostRecon
Users that are interested in HostRecon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and…☆588Jul 3, 2025Updated last year
- A PowerShell tool for taking screenshots of multiple web servers quickly.☆93Apr 19, 2017Updated 9 years ago
- MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…☆3,292Sep 21, 2026Updated last month
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆2,101Jul 11, 2024Updated 2 years ago
- DAFT: Database Audit Framework & Toolkit☆184Aug 11, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Search for potential frontable domains☆647Mar 22, 2023Updated 3 years ago
- This module mangles two lists of names together to generate a list of potential email addresses or usernames. It can also be used to simp…☆51Sep 25, 2017Updated 9 years ago
- Credential and Red Teaming Defense for Windows Environments☆330Jul 17, 2024Updated 2 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- HTA encryption tool for RedTeams☆1,429Nov 9, 2022Updated 3 years ago
- Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to…☆179Sep 11, 2023Updated 3 years ago
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆632Jun 20, 2017Updated 9 years ago
- PowerShell Pass The Hash Utils☆1,812Dec 9, 2018Updated 7 years ago
- Random Tools☆852Oct 20, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of Red Team focused tools, scripts, and notes☆1,144Nov 19, 2024Updated last year
- Domain Password Audit Tool for Pentesters☆1,071Dec 24, 2025Updated 10 months ago
- PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server☆2,747Dec 12, 2024Updated last year
- PowerShell Remote Download Cradle Generator & Obfuscator☆852Mar 23, 2018Updated 8 years ago
- PowerShell MachineAccountQuota and DNS exploit tools☆1,514Jan 11, 2023Updated 3 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,552Aug 2, 2019Updated 7 years ago
- Password spraying using AWS Lambda for IP rotation☆671Feb 14, 2023Updated 3 years ago
- RedSnarf is a pen-testing / red-teaming tool for Windows environments☆1,220Sep 14, 2020Updated 6 years ago
- SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, Supe…☆1,346Nov 22, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,693Oct 11, 2018Updated 8 years ago
- Run PowerShell command without invoking powershell.exe☆1,560Apr 9, 2026Updated 6 months ago
- A tool to create a JScript file which loads a .NET v2 assembly from memory.☆1,335Jan 18, 2021Updated 5 years ago
- A collection of files for adding and leveraging custom properties in BloodHound.☆185Nov 28, 2019Updated 6 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆288Oct 31, 2018Updated 7 years ago
- ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the…☆1,931Jun 15, 2020Updated 6 years ago
- locate and attack Lync/Skype for Business☆343Oct 1, 2024Updated 2 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆868Jun 25, 2024Updated 2 years ago
- ☆524Sep 15, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cheat sheets for various projects.☆1,101Oct 16, 2017Updated 9 years ago
- Tool to audit and attack LAPS environments☆969Jan 31, 2018Updated 8 years ago
- SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader☆1,334Oct 1, 2019Updated 7 years ago
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,123Feb 10, 2021Updated 5 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆3,049Nov 19, 2025Updated 11 months ago
- Check if MS-RPRN is remotely available with powershell/c#☆184Oct 21, 2018Updated 8 years ago
- WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application cont…☆349Aug 27, 2018Updated 8 years ago