Have you ever wanted to transfer files over DNS A records? No? Well too bad lol, I've updated @domchell's PowerDNS to do that along with some other things. Could be useful for pentests with no standard outbound access... which yes I get quite a bit of.
https://github.com/icyguider/NewPowerDNS
#DNS
@NetPentesters

​​Microsoft Activation Scripts (MAS)

A Windows and Office activator using HWID / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

https://github.com/massgravel/Microsoft-Activation-Scripts
#Microsoft
@Netpentesters

​​CVE-2022-24644

ZZ Inc. KeyMouse 3.08 (#Windows) Unauthenticated Update Remote Code Execution Vulnerability

https://github.com/gerr-re/cve-2022-24644

#cve
#Vulnerability
@Netpentesters

​​acltoolkit

ACL Toolkit is an ACL abuse swiss-knife.

https://github.com/zblurx/acltoolkit
#acl
@Netpentesters

Poweshell tool to check for partially encrypted files with various techniques and sandbox them for analysis.

https://github.com/shadowdevnotreal/anti_Royal

#Powershell
@NetPentesters

We tried to put together all known MITM attacks and methods of protection against these attacks. Here is also contains tools for carrying out MITM attacks, some interesting attack cases and some tricks associated with them.

https://github.com/Sab0tag3d/MITM-cheatsheet
#MITM
@NetPentesters

Kerberos LPE (CVE-2023-21817)

https://resee.it/tweet/1645565092229189632
#Kerberos
@Netpentesters

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

#ad #cheatsheet
@NetPentesters

​​PowerShell-Deobfuscation-Exercise

An exercise to practice deobfuscating PowerShell Scripts.

https://github.com/trevormiller6/PowerShell-Deobfuscation-Exercise

#PowerShell #Deobfuscation
@NetPentesters

​​Somnium

Script to test network prevention and detection capabilities.

https://github.com/asluppiter/Somnium

Active Directory Toplogy Visualizer

https://github.com/ryanries/ADTV

#AD
#Toplogy
@NetPentesters

​​About Cloud Scout

Cloud Scout is a plugin which works on top of BloodHound, leveraging its visualization capabilities in order to visualize cross platform attack paths.

https://github.com/SygniaLabs/security-cloud-scout

#BloodHound
@NetPentesters

Quick Network Scanner Library

Rust library for scanning network hosts asynchronously.

https://github.com/0xor0ne/qscan

​​ADReplStatus

Active Directory Replication Status Tool, aka ADREPLSTATUS.

https://github.com/ryanries/ADReplStatus

#AD
@NetPentesters

​​Popeye

A Kubernetes Cluster Sanitizer

Popeye is a utility that scans live Kubernetes cluster and reports potential issues with deployed resources and configurations. It sanitizes your cluster based on what's deployed and not what's sitting on disk. By scanning your cluster, it detects misconfigurations and helps you to ensure that best practices are in place, thus preventing future headaches.

https://github.com/derailed/popeye

#Kubernetes
@NetPentesters

​​CVE-2023-28760

TP-Link AX1800 WiFi 6 Router - Memory Corruption Vulnerability (Exploit).

https://github.com/TecR0c/exploits/tree/main/CVE-2023-28760

Details:
https://www.tecsecurity.io/blog/tp-link_ax1800

#exploit
#cve
#tplink
@netpentesters

درود
بدلیل مشغله کاری از تمامی دوستان فعال در حوزه های سایبری دعوت میشود به آیدی زیر پیام داده و در صورت تایید به عنوان مدیر و ویراستار جدید کانال انتخاب شوند
@DK_HBB_Bot