Eloy

certi. ADCS abuser

ticket_converter. A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.

cerbero. Kerberos protocol attacker

awsenum. Enumerate AWS permissions and resources.

ntlm-info. Retrieve host information from NTLM

keydump. Dump Linux keyrings

httpsweet. An HTTP server to easily download and upload files.

shellnova. Advanced shellcode implant template for Linux

arplayer. A tool to attack ARP

dhcplayer. Play with DHCP

pivotnacci. A tool to make socks connections through HTTP agents

tickey. Tool to extract Kerberos tickets from Linux kernel keys.

BadBlood. BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

sudohunt. Hunt for sudo sessions

barrido. Tool to discover paths in web applications

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

wappalyzer. Identify technology on websites.

nishang. Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

sepriv. Tool to manage user privileges

cybernotes. HTML

htesterp. Rust

kerbrute. An script to perform kerberos bruteforcing by using impacket

suricata. Suricata git repository maintained by the OISF

Empire. Empire is a PowerShell and Python post-exploitation agent.

pwntools. CTF framework and exploit development library

suricata-verify. Suricata Verification Tests - Testing Suricata Output

argparses. Parsers of arguments in several languages