Charlie Bromberg

pywhisker. Python version of the C# tool for "Shadow Credentials" attacks

targetedKerberoast. Kerberoast with ACL abuse capabilities

shellerator. Simple CLI tool for the generation of bind and reverse shells in multiple languages

smartbrute. Password spraying and bruteforcing tool for Active Directory Domain Services

ShadowCoerce. MS-FSRVP coercion abuse PoC

dcshadow. Python alternative to Mimikatz lsadump::dcshadow

The-Hacker-Tools. This project is aimed at freely providing technical guides on various hacking tools.

impacket. Impacket is a collection of Python classes for working with network protocols.

httpmethods. HTTP verb tampering & methods enumeration

telegram-bot-cli. This is a command line tool I use when I want to get notified, on Telegram (on my phone), that something has finished running (on my laptop).

uberfile. Simple CLI tool for the generation of downloader oneliners for UNIX-like or Windows systems

hashonymize. Anonymize your hashcat formatted files for online cracking

Get-GPPPassword. Python script for extracting and decrypting Group Policy Preferences passwords

google-colab-hashcat. Jupyter Notebook

CVE-2020-7961. Exploit script for CVE-2020-7961

GeoWordlists. GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.

openvpn-install. OpenVPN road warrior installer for Debian, Ubuntu and CentOS

blackhat-arsenal-tools. Official Black Hat Arsenal Security Tools Repository

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

BloodHound.py. A Python based ingestor for BloodHound

PetitPotam. C

CrackMapExec. A swiss army knife for pentesting networks

PKINITtools. Tools for Kerberos PKINIT and relaying to AD CS

bloodhound-quickwin. Simple script to extract useful informations from the combo BloodHound + Neo4j

GoldenCopy. Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.

Powermad. PowerShell MachineAccountQuota and DNS exploit tools

krbrelayx. Kerberos unconstrained delegation abuse toolkit

volatility3. Volatility 3.0 development

ldeep. In-depth ldap enumeration utility

badges. ToolsWatch and Black Hat Arsenal selection of badges

username-anarchy. Username tools for penetration testing

CrackMapExec-MachineAccountQuota. CrackMapExec module that retrieves the "MachineAccountQuota" domain-level attribute.

BloodHound. Six Degrees of Domain Admin

infosec-events.

Keyboard. C++

github-actions-nested-workflows. GHA bug showcase