babywyrm Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

activereign

A Network Enumeration and Attack Toolset for Windows Active Directory Environments.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

ad_attack

AD Attack is a bash-based tool that brings together some of the most well-known tools for conducting specific attacks on Active Directory environments. With this tool, you can perform tasks such as port scanning, null sessions, directory searches without authentication, password cracking, and AS-REPRousting.

adcstemplate

A PowerShell module for exporting, importing, removing, permissioning, publishing Active Directory Certificate Templates. It also includes a DSC resource for creating AD CS templates using these functions. This was built with the intent of using DSC for rapid lab builds. Could also work in production to move templates between AD CS environments.

adopt

Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.

adpeas

Powershell tool to automate Active Directory enumeration.

adredteamenumscript

Traditional AD RedTeam Full Enumeration Script used to query all aspects of your target Forest.

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

aes

A pure Python implementation of AES

akamai-toolkit

A set of tools to work on Akamai v1 anti-bot solution. Current supported version: 1.70

alpine-chrome

Chrome Headless docker images built upon alpine official image

amass

In-depth attack surface mapping and asset discovery

amazon-eks-ami

Packer configuration for building a custom EKS AMI

anchore-container-scanner-plugin

Jenkins plugin that adds Anchore container image analysis and policy evaluation to Jenkins as a build step

apache2_backdoormod

A backdoor module for Apache2

apiflask

A lightweight Python web API framework.

application-security-engineer-interview-questions

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack_data

A repository of curated datasets from various attacks

authelia

The Single Sign-On Multi-Factor portal for web apps

auto-owasp

BurpSuite Extension: A one-stop pen testing checklist and logger tool

autorepeater

Automated HTTP Request Repeating With Burp Suite

awae-oswe-prep

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-bbht

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain. Feel free to fork, and add your own tools.

awesome-cilium

A curated list of awesome projects related to cilium

awesome-cybersecurity-handbooks

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

awesome-javascript

🐢 A collection of awesome browser-side JavaScript libraries, resources and shiny things.