The-Viper-One

PsMapExec. Dominate Active Directory with PowerShell.

Pentest-Everything. A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

Invoke-PowerChrome. Decrypt Chromium based browser passwords with PowerShell.

ActiveDirectoryAttackTool. ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is is best utilized using a set of known credentials against the host.

Invoke-RDPThief. Inject RDPThief into memory with PowerShell.

Invoke-PassTheCert. Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel

OSEP-Notes. Various notes I have compiled during the OSEP PEN-300 course.

Invoke-PowerDPAPI. Decrypt SCCM and DPAPI secrets with Powershell.

RedTeam-Pentest-Tools. PowerShell

PME-Scripts. PowerShell

Invoke-FindEventCreds. PowerShell script to parse Sysmon Event ID 1 and Security Event Log ID 4688 for command line credentials

DCSync-To-Hashcat. Performs DCSync, extracts all hashes in a Hashcat friendly format

Invoke-DumpMDF. PowerShell script that extracts MSSQL logon hashes from master.mdf

Pentest-Tools.

hashcat-6.2.6-SCCM. hashcat fork with SCCM hash support

Invoke-SessionExec. Execute commands in context of a user logon session

Invoke-VNCAuth. PowerShell script to enumerate for and identify VNC servers that do not require authentication. Supports Active Directory target acquisition and CIDR notations.

Create-BloodHound-Graph. HTML file that utilises vis.js to create bespoke bloodhound graphs.

Invoke-DomainDictionary. Parses information from the Current or specified Domain into a dictionary file to be used for password cracking

Invoke-AuthenticatedTimeRoast. PowerShell

VNC-Hunt. PowerShell script that hunts for local VNC encrypted passwords and decrypts them

Invoke-PowerStrings. Extract strings from binary files with PowerShell

Invoke-PowerIncrease. PowerShell port of SharpIncrease. Inflates binary files to aid in AV evasion

SNMP-Scan. PowerShell script to enumerate for and authenticate to SNMP servers.

RDPassSpray. Python3 tool to perform password spraying using RDP

Invoke-DumpGMSA. PowerShell script to Dump GMSA Password blobs into RC4, 3DES and AES hash formats.

ConvertTo-NT. Uses PowerShell to convert a given string to its NT hash equivalent.

Simple-AMSI-Bypass. PowerShell

LocalAccountBruteforce. Simple PowerShell script to Bruteforce local accounts.