averagesecurityguy / scripts

Scripts I use during pentest engagements.

Scripts

Introduction

This is a collection of scripts I have written to use in pentests. Let me know if there are any problems with the scripts. If you have any suggestions for new scripts let me know as well; I am always looking for new ideas.

Organization

• bruteforce - Password brute forcing.
• cloud - Interacting with or testing cloud-based services.
• database - Testing traditional databases.
• enumeration - Enumerate DNS, web applications, and users.
• exploit - Exploits and exploit development.
• nosql - Testing non-traditional databases.
• osint - Open source intelligence gathering.
• passwords - Password.
• phishing - Tools to facilitate phishing.
• postexploit - Tools for gathering data post exploitation.
• scan - Network scanners and parsers.
• shells - No explanation necessary.
• webapp - Tools for web application testing.
• wireless - Wireless testing tools.

scripts's Issues

how to use bypass.c

.

.

Provide installer for netintel files

Suggestion: Package netintel as a pip or similar package to make it easier to install. This would reduce the friction of getting a machine setup to use it.

Issue in CORS PoC

Hi,

I have two suggestions for your script for CORS PoC.

On this page: https://github.com/averagesecurityguy/pocs/blob/master/cors.html

1. The 3rd line is commented. It has a starting comment but no ending comment. This makes every lines after that being commented.
2. The 26th line passes parameters. But there is a syntax error. Instead of "GET" and "/", it should be 'GET' and '/'.

Thanks !