n00py

WPForce. Wordpress Attack Suite

LAPSDumper. Dumping LAPS from Python

NorkNork. Powershell Empire Persistence finder

DCSync. DCSync Attack from Outside using Impacket

Hwacha. Deploy payloads to *Nix systems en masse

ReadingList. Python

GetFGPP. Get Fine Grained Password Policy

pOSt-eX. Post-exploitation scripts for OS X persistence and privesc

Slackor. A Golang implant that uses Slack as a command and control server

DockerKnocker. Exploits Unauth Docker API

CUCMe. Cisco Unfied Call Manager enumeration

Dissonance. Rogue Synergy server

BurpIntruderDownloader. https://www.n00py.io/2020/05/extracting-files-from-burp-intruder-output/

AngryHippo. Exploiting the HippoConnect protocol for HippoRemote

Coercer. A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

CactusCon2023.

RapidIdentity_spray. For Spraying RapidIdentity Portals

Pandoras-Box. This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.

go-secdump. Tool to remotely dump secrets from the Windows registry

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

BetterHeaderGetter. Python

BlackHatPython. Black Hat Python Labs

CVE-2022-39197. CobaltStrike <= 4.7.1 RCE

java_deserialization_exploits. A collection of Java Deserialization Exploits

SprayingToolkit. Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient

awesome-windows-security. List of Awesome Windows Security Resources

plznospy. Go

go-execute-assembly. Allow a Go process to dynamically load .NET assemblies

nps_payload. This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091) Payload written by Ben Mauch (@Ben0xA) aka dirty_ben

PractiScore. Auto-registers for matches in PractiScore

routersploit. The Router Exploitation Framework

KeychainCracker. macOS keychain cracking tool

n00py.

FuzzStrings. Simple, hand-picked list of fuzz strings

CrackMapExec. A swiss army knife for pentesting networks

NetExec. The Network Execution Tool

respounder. Respounder detects presence of responder in the network.

SeeYouCM-Thief. HTML

findmyhash. Hash cracker

twittor. A fully featured backdoor that uses Twitter as a C&C server

impacket. Impacket is a collection of Python classes for working with network protocols.

go-mimikatz. A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.

OffensiveGoLang. A collection of Offensive Go packages.