saw-your-packet / EC2StepShell
EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.
☆63Updated 5 months ago
Alternatives and similar repositories for EC2StepShell:
Users that are interested in EC2StepShell are comparing it to the libraries listed below
- Enumerate AWS permissions and resources.☆67Updated 2 years ago
- A tool for quickly evaluating IAM permissions in AWS.☆57Updated last year
- Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…☆39Updated last year
- User enumeration and password spraying tool for testing Azure AD☆69Updated 3 years ago
- C2 Automation using Linode☆80Updated 2 years ago
- Analyzing AD domains for security risks related to user accounts☆63Updated 2 years ago
- Dump Kerberos tickets from the KCM database of SSSD☆49Updated 5 months ago
- Next generation fireprox AWS API endpoint creation utility.☆49Updated 2 years ago
- A BurpSuite extension to deploy an OpenVPN config file to DigitalOcean and set up a SOCKS proxy to route traffic through it☆48Updated last year
- A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.☆81Updated last year
- Enumerate valid users within Microsoft Teams and OneDrive with clean output.☆57Updated 3 weeks ago
- RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.☆57Updated 2 months ago
- ☆51Updated last year
- ☆27Updated last year
- Easy red team phishing with Puppeteer☆127Updated 2 years ago
- ☆147Updated last year
- ☆53Updated last year
- GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments☆89Updated 8 months ago
- Network penetration testing toolset wrapper☆81Updated 2 years ago
- Azure Service Subdomain Enumeration☆54Updated 6 months ago
- Tool to perform GCP Domain Wide Delegation abuse and access Gmail and Drive data☆44Updated last year
- A fast enumeration tool for publicly exposed Azure Storage blobs.☆86Updated last year
- Fast website scraper and wordlist generator☆75Updated last year
- Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.☆39Updated 2 years ago
- CVE-2023-34362: MOVEit Transfer Unauthenticated RCE☆62Updated 11 months ago
- ☆52Updated last year
- Cloud Exploit Framework☆113Updated 2 years ago
- Automated exploitation of MSSQL servers at scale☆106Updated last month
- Fast multithreaded multiplatform password spraying tool designed for easy use. Supports webhooks, jitter, delay, files, rotation, backend…☆38Updated 5 months ago