ed

msprobe. Finding all things on-prem Microsoft for password spraying and enumeration.

sneaky_gophish. Hiding GoPhish from the boys in blue

Log4jUnifi. Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more.

awesome-password-spraying. Everything and anything related to password spraying

ffufw. Go

Log4jHorizon. Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.

Log4jCenter. Exploiting CVE-2021-44228 in vCenter for remote code execution and more.

NTLMRecon. Enumerate information from NTLM authentication enabled web endpoints 🔎

sneaky_proxy. Hiding your infrastructure from the boys in blue.

peas. Modified version of PEAS client for offensive operations

bhp. bhp is a BloodHound user file parser!

pypassgen. Generate passwords for spraying from a config file!

rnotify. Notify on new files added to folder via Slack web hook. Primarily for use with responder and ntlmrelayx.

succ. Go

whoxyd. Python

spraycharles. Low and slow password spraying tool, designed to spray on an interval over a long period of time

CVE-2020-1472. PoC for Zerologon - all research credits go to Tom Tervoort of Secura

Log4j-Payloads.

403-bypasser. Python

offensive-azure. Collection of offensive tools targeting Microsoft Azure

gingersnap. A Go project template

LdapRelayScan. Check for LDAP protections regarding the relay of NTLM authentication

Spray365. Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

hashview. A web front-end for password cracking and analytics

cloudcheck. Check if a list of IPs are associated with a cloud or CDN provider quickly.

CredMaster. Refactored & improved CredKing, uses FireProx API method of IP rotation instead of Lambdas

recon-scapy. Simple script for recon network

redlure-worker. Skeletal API node to serve phishing sites