Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a
.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
This project is an offensive security toolkit and development framework for creating memory-safe malware, network scanners, and payload generators. It provides a structured approach to developing exploits, shellcode, and remote access tools. The framework distinguishes itself through the use of no-standard-library environments to generate minimal standalone machine code and shellcode. It also supports the compilation of high-performance logic into WebAssembly for the creation of deceptive web interfaces used in social engineering. Capability areas cover automated vulnerability discovery via
This project is a curated collection of frameworks, libraries, and toolsets designed for social engineering and public data gathering. It aggregates specialized software and educational materials used to perform human-centric attacks during professional security engagements. The directory provides resources for gathering and visualizing open source intelligence to identify sensitive information leaks. It also includes a collection of methods and software for executing phishing campaigns to harvest credentials and session cookies. The repository further covers educational materials focused on
Directory Services Internals (DSInternals) PowerShell Module and Framework
The main features of michaelgrafnetter/dsinternals are: Offensive Security Tools, PowerShell Tooling.
Open-source alternatives to michaelgrafnetter/dsinternals include: samratashok/nishang — Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows… kevin-robertson/inveigh — .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers. skerkour/black-hat-rust — This project is an offensive security toolkit and development framework for creating memory-safe malware, network… v2-dev/awesome-social-engineering — This project is a curated collection of frameworks, libraries, and toolsets designed for social engineering and public… mandiant/commando-vm — Commando VM is a Windows-based penetration testing distribution and offensive security virtual machine. It serves as a… mxrch/ghunt — GHunt is a Google account investigator and open-source intelligence framework designed to retrieve publicly available…