Chris King

FiercePhish. FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

UhOh365. A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

CredNinja. A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter

Kali-Setup. Script for Kali that adds a bunch of tools and customizes it to be much better

SMBCrunch. 3 tools that work together to simplify reconaissance of Windows File Shares

Recon-NG-API-Key-Creation. One of the biggest annoyances of using Recon-ng is getting everything set up to use it. So here I’ll outline the different API keys it can use and where to get them yourself.

SharpStat. C# utility that uses WMI to run "cmd.exe /c netstat -n", save the output to a file, then use SMB to read and delete the file remotely

Get-ReconInfo. A powershell script that prints a lot of IP and connection info to the screen

Nmap-scripts. A collection of nmap scripts I've written

CredSwissArmy. DEPRECATED! LOOK AT CREDNINJA! A tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB

Misc-scripts. Honestly, these are just scripts for my own use and consumption. If someone wants to use them too, cool.

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

IPCheckScope. A simple script to help check if a list of IPs are within the provided network scopes

LyncSniper. LyncSniper: A tool for penetration testing Skype for Business and Lync deployments

Egress-Assess. Egress-Assess is a tool used to test egress data detection capabilities

CVE-2018-8420. 原PoC甚至符号都打错了！太不走心了！

SouthwestCheckin. 🛫 Python script to checkin to a Southwest Flight 🛬

cve-2019-19781. This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

SharpUp. SharpUp is a C# port of various PowerUp functionality.

CVE-2020-1472. Test tool for CVE-2020-1472

dotfiles. Some simple dotfiles of mine.