This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.
☆502Nov 21, 2019Updated 6 years ago
Alternatives and similar repositories for physical-docs
Users that are interested in physical-docs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is u…☆610Mar 2, 2021Updated 5 years ago
- LinkedIn reconnaissance tool☆55Dec 17, 2021Updated 4 years ago
- TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.☆1,346Jan 31, 2022Updated 4 years ago
- Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to …☆760Sep 23, 2024Updated 2 years ago
- An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR☆2,346Dec 6, 2023Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Adversary Tactics - PowerShell Training☆1,612Jan 22, 2020Updated 6 years ago
- ☆82Nov 2, 2019Updated 7 years ago
- A tool for automating cracking methodologies through Hashcat from the TrustedSec team.☆1,864Updated this week
- Find vulnerabilities in AD Group Policy☆636Mar 25, 2022Updated 4 years ago
- The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.☆5,582Sep 22, 2024Updated 2 years ago
- Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's po…☆3,955Oct 28, 2026Updated last week
- Issues to consider when planning a red team exercise.☆614Aug 23, 2017Updated 9 years ago
- NTLMv1 Multitool☆676Jun 26, 2026Updated 4 months ago
- Manage Engine Decrypter☆29Oct 17, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Proxy Helper is a WiFi Pineapple module that will automatically configure the Pineapple for use with a proxy such as Burp Suite.☆41Oct 15, 2022Updated 4 years ago
- Automate the creation of a lab environment complete with security tooling and logging best practices☆5,056Jul 6, 2024Updated 2 years ago
- The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an or…☆505Nov 17, 2022Updated 3 years ago
- Proofs of Concept. Just fucking around.☆189Aug 17, 2022Updated 4 years ago
- MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…☆3,291Sep 21, 2026Updated last month
- Slides from my talk in "Hackinparis" 2019 edition☆90Jun 22, 2019Updated 7 years ago
- This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…☆2,853Apr 6, 2026Updated 7 months ago
- Lure - User Recon Automation for GoPhish☆164Jul 30, 2023Updated 3 years ago
- Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term o…☆2,687Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security …☆1,044May 27, 2020Updated 6 years ago
- A tool to abuse Exchange services☆2,309Jun 10, 2024Updated 2 years ago
- Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient☆1,578Oct 17, 2022Updated 4 years ago
- Wiki to collect Red Team infrastructure hardening resources☆4,550Oct 1, 2025Updated last year
- Automated Red Team Infrastructure deployement using Docker☆1,279Aug 24, 2022Updated 4 years ago
- PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and…☆588Jul 3, 2025Updated last year
- Perform a MitM attack and extract clear text credentials from RDP connections☆1,457Nov 20, 2025Updated 11 months ago
- A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the ac…☆1,111Mar 19, 2024Updated 2 years ago
- Domain Password Audit Tool for Pentesters☆1,073Dec 24, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automatically spin up infra for phishing☆63Feb 1, 2020Updated 6 years ago
- Covenant is a collaborative .NET C2 framework for red teamers.☆4,745Jul 18, 2024Updated 2 years ago
- Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)☆70Dec 17, 2021Updated 4 years ago
- HTA encryption tool for RedTeams☆1,432Nov 9, 2022Updated 3 years ago
- This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit c…☆574Jan 22, 2020Updated 6 years ago
- A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux☆1,429Oct 3, 2020Updated 6 years ago
- a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )☆2,984Feb 27, 2026Updated 8 months ago