mr-r3bot / Proxyshell-Exchange
Poc script for ProxyShell exploit chain in Exchange Server
☆16Updated 2 years ago
Related projects: ⓘ
- OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.☆26Updated last year
- A basic proxylogon scanner☆27Updated 3 years ago
- ☆20Updated last year
- Burp Suite extension for extracting metadata from files☆19Updated 3 years ago
- Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)☆21Updated 2 years ago
- Magento Security Scanner☆15Updated 2 years ago
- Simple tools to handle string and generate subdomain permutations☆13Updated 2 years ago
- ☆15Updated 5 months ago
- Multi-threaded C2 framework built in Flask with keylogger - from the Offensive C# Course by Naga Sai Nikhil☆20Updated 2 years ago
- SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environme…☆47Updated 3 years ago
- A multithreaded, queued SSH key and/or password spraying tool.☆15Updated last year
- Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.☆19Updated 2 years ago
- ☆16Updated 2 years ago
- Execute embedded Mimikatz☆13Updated 2 years ago
- C# .Net 5.0 project to build BOF (Beacon Object Files) in mass☆26Updated last year
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆13Updated 2 years ago
- Quickly generate every payload type for each listener and optionally host via HTTP.☆16Updated 3 years ago
- Compiled Binaries for Sharp Suite☆12Updated 4 years ago
- Extract domain from SSL Information☆11Updated 2 years ago
- Use rpc null sessions to retrieve machine list, domain admin list, domain controllers☆12Updated last year
- A straightforward tool for exploiting SMTP Smuggling vulnerabilities.☆15Updated last month
- NVD semiupdated database to be used with CVEScannerV2☆11Updated this week
- Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them b…☆19Updated 5 months ago
- Finding SSL Blindspots for Red Teams☆30Updated 4 years ago
- Easily-guessable Password Generator for Password Spray Attack☆20Updated 4 years ago
- Ansible Cobalt Strike (Docker)☆14Updated 2 years ago
- MAC Address brute forcing tool, used to bypass MAC based filtering☆13Updated 2 years ago
- A malicious .cab creation tool for CVE-2021-40444☆12Updated 3 years ago
- ☆20Updated this week
- Automated compromise detection of the world's most popular packages☆15Updated 11 months ago