trustedsec

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique...

Situational Awareness commands implemented using Beacon Object Files

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

TrustedSec Sysinternals Sysmon Community Guide

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

Remote operations commands implemented using Beacon Object Files

Windows protocol library, including SMB and RPC implementations, among others.

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by...

The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect...

This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091)...

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The...

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

Rid_enum is a null session RID cycle attack for brute forcing domain controllers.

SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.

Retired TrustedSec Capabilities

Tool for viewing NTDS.dit

Lnk crafting and research tools

Pivoter is a proxy tool for pentesters to have easier lateral movement.

The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not...

QuickSQL is a simple MSSQL query tool that allows you to connect to MSSQL databases and does not require administrative level rights to use.

ConQR is an open source ticketing system for conferences to issue QRCode's in a quick, efficient, and easy manner.

This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA...