akenofu Goto Github PK

a-sample-malicious-word-document-to-test-for-av-in-file-uploads

A Sample Malicious Word Document to test for AV in file uploads

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

bustme

bustme is a directory brute forcing tool that assesses if pages exist according to the returned response body.

codeigniter

Open Source PHP Framework (originally from EllisLab)

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

crt

Contact: [email protected]

devsecops-scripts

erica

A discord music bot with swag 😉

gatsby-simplefolio

⚡️ A minimal Gatsby portfolio template for Developers

hackallthethings

Meticulously curated security notes with Emphasis on Application Security, DevSecOps, Cloud Computing, and Penetration Testing.

ios-debugserver

including iOS10/iOS12/iOS13/iOS14 debugserver

jsat

mass-hunting-idors-using-jq-and-swagger-files

Accompanying sample data to follow along: https://blog.akenofu.me/mass-hunting-idors-in-openapispecification-swagger-files/

oscp-cheat-sheet

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

palo-alto-config-security-scanner

Scan Palo Alto config files for generic security misconfigurations.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

poc

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

remote-observer-java-rmi-for-chatting

sharp-wifi-password-dump

.Net port of Windows-Wifi-Password-Dump

url_fuzzer_401_403_bypass

A Burp extension to Fuzz URLs for HTTP parser inconsistencies

windows-wifi-password-dump

Dump Windows saved Wifi Passwords – Built using Win32 API in C++

writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.