Kerberos Party Tricks
This tool is designed to weaponize Kerberos protocol flaws by abusing vulnerabilities in the Kerberos v5 protocol, allowing for enumeration/brute force attacks on domain users and obtaining Kerberos TGS-REP and AS-REP tickets without sending packets to target systems, making the attacks stealthy and hard to detect.
FEATURES
ALTERNATIVES
Covenant is a .NET C2 framework for red teamers, facilitating collaborative and efficient management of red team operations.
A free online wargame for practicing hacking skills and learning security concepts.
A toolkit to attack Office365, including tools for password spraying, password cracking, token manipulation, and exploiting vulnerabilities in Office365 APIs and services.
A guide on using Apache mod_rewrite to strengthen phishing attacks and bypass mobile device restrictions
A collection of tests for Local File Inclusion (LFI) vulnerabilities using Burp Suite.
A standard for conducting penetration tests, covering seven main sections from planning to reporting.
Pacu is an open-source AWS exploitation framework for offensive security testing against cloud environments.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.