Joe Helle

Oh365UserFinder. Python3 o365 User Enumeration Tool

PowerShellForPentesters. Course repository for PowerShell for Pentesters Course

threader3000. Multi-threaded Python Port Scanner with Nmap Integration

lnkbomb. Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

msLDAPDump. LDAP enumeration tool implemented in Python3

printspoofer.

ADGenerator. Active Directory Generator files for Movement, Pivoting, and Persistence for Pentesters and Ethical Hackers.

msdorkdump. Google Dork File Finder

msImpersonate. msImpersonate - User account impersonation written in pure Python3

msdnsscan. MayorSec DNS Enumeration Tool

AWeSomeUserFinder. AWS IAM Username Enumerator and Password Spraying Tool in Python3

Python3-C2-Course-Code-Modules. Modules for my C2 course students to use for their own projects.

PowerShellRunner. PowerShell runner for executing malicious payloads in order to bypass Windows Defender.

GatekeeperLite. Lite version of my Gatekeeper backdoor for public use.

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

BadLister. Deny list generator for password filters

PythonCreateYourOwnSeries. Files for my Python3 Create Your Own Tool Series

Firefox-Dumper. Tool to transfer credential files from Firefox to your local machine to decrypt offline.

geeMailUserFinder. Python Gmail User Enumeration Tool

MayorbotC2. My attempt at weaponizing Discord.

Internal-Pentest-Playbook. Internal Network Penetration Test Playbook

msToolSet-Docker. Dockerized version of my most used tools.

helper. PowerShell

WinPwn. Automation for internal Windows Penetrationtest / AD-Security

bufferoverflow. Repository of Ruby related buffer overflow boilerplates

MayorSecPasswordGenerator. Simple Python tool that generates a pseudo-random password with numbers, letters, and special characters in accordance with password policy best practices.

Covenant. Covenant is a collaborative .NET C2 framework for red teamers.

msLHFSS. MayorSec Low Hanging Fruit Security Scanner

Minimalistic-offensive-security-tools. A repository of tools for pentesting of restricted and isolated environments.

toolsdirectory. PowerShell

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

CVE-2021-37832. CVE-2021-37832 - Hotel Druid 3.0.2 SQL Injection Vulnerability - 9.8 CVSS 3.1

Osmedeus. Fully automated offensive security framework for reconnaissance and vulnerability scanning

DigiSpark-Scripts. USB Rubber Ducky type scripts written for the DigiSpark.

GoPhish-Templates. GoPhish Templates that I have retired and/or templates I've recreated.

decider. A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

MayorSecWorkoutTracker. MayorSec Workout Tracker

cognito-identity-sa. Cognito Identity Situational Awareness and Exploitation

CVE-2020-28351. CVE-2020-28351 - Reflected Cross-Site Scripting attack in ShoreTel version 19.46.1802.0.

msesxicontroller. Python ESXi CLI Controller

LOLAPPS. LOLAPPS is a compendium of applications that can be used to carry out day-to-day exploitation.

Wordlists.

cloud_enum. Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

pingsweep. The first tool I wrote when I started Pentesting.

CVE-2021-37833. CVE 2021-37833 Hotel Druid 3.0.2 Reflected Cross Site Scripting

pretender. Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

ms-s3-Enum. Public S3 Bucket Enumeration and Download Tool

Project_Plus. HTML

eaphammer. Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

InvisibilityCloak. Proof-of-concept obfuscation toolkit for C# post-exploitation tools

PMapper. A tool for quickly evaluating IAM permissions in AWS.

untitledgoosetool. Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.