Hackpack

<!-- Author: Kike Fontán (@CosasDePuma) Repository: Hackpack Description: An up-to-date collection of nuclei-templates, precompiled binaries and hacking scripts, taking advantage of the power of GitHub Actions. --> <div align="center"> <hr/> <img src="logo.png" alt="Hackpack" /> <br/> <br/> <img alt="GitHub Issues or Pull Requests" src="https://img.shields.io/github/issues/cosasdepuma/hackpack?style=for-the-badge"/> <img alt="GitHub last commit" src="https://img.shields.io/github/last-commit/cosasdepuma/hackpack?style=for-the-badge"/> <img alt="GitHub commit activity" src="https://img.shields.io/github/commit-activity/m/cosasdepuma/hackpack?style=for-the-badge"/> <img alt="GitHub Actions Workflow Status" src="https://img.shields.io/github/actions/workflow/status/cosasdepuma/hackpack/release.yml?style=for-the-badge"/> <hr />

📎 Windows Hackpack

| Tool | Description | | ------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------- | | Certify | Active Directory certificate abuse. | | Get-ServiceACL | Retrieve the access control list (ACL) for a service running on a host. | | MailSniper | Toolset for performing analysis and attacks on mail services. | | Powecat | Netcat-like written in PowerShell. | | PowerLurk | Toolset for building malicious WMI event subscriptions. | | PowerSharpPack | Useful offensive C# projects wraped into Powershell for easy usage. | | PowerSploit | PowerShell post-exploitation framework. | | Rubeus | Toolset for raw Kerberos interaction and abuses. | | Seatbelt | Security oriented host-survey "safety checks". | | SharPersist | Toolkit for Windows persistence. | | SharpUp | PowerUp-like tool written in C#. |

<br/>

⚛️ Nuclei Templates

| Type | Proto | ID | Description | | ---- | ----- | --- | ----------- | | 🔀 | SSH | ssh-workflow | SSH workflow. | | 📄 | SSH | ssh-detect | Software detection via Banner Grabbing. | | 📄 | SSH | ssh-auth-password | Password-based authentication enabled. | | 📄 | SSH | ssh-weak-kex | Weak key exchange algorithms offered. | | 📄 | SSH | ssh-weak-mac | Weak message authentication code algorithms offered. | | 📄 | SSH | cve-2023-48795 | Terrapin Attack. |

<hr/> </div>