d30sa1 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aggressorscripts

Aggressor scripts for use with Cobalt Strike 3.0+

aptnotes

Various public documents, whitepapers and articles about APT campaigns

at-ps

Adversary Tactics - PowerShell Training

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attck-pentester-book

ATTCK-PenTester-Book

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

cve-2020-0601

PoC for CVE-2020-0601

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

dns-persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

exploit-database-bin-sploits

Exploit Database binary exploits located in the /sploits directory

exploits

Miscellaneous exploit code

iboot

iBoot from iOS9 Leaked Source Code (Happy Hunting)

infosec_reference

Information Security Reference That Doesn't Suck

krackattacks-test-ap-ft

Appreciate security researcher. Use at your own risk.

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

my-lib-books

My Library about Technical Books

one-lin3r

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

oscp-pwk-notes-public

:closed_book: Optixal's Offensive Security Certified Professional (OSCP) / Penetration Testing with Kali Linux (PWK) Personal Notes :computer:

poorman-s-rubber-ducky

Leonardo-Arduino script and python keylogger for BAD-USB aka Poor Man's RUBBER-DUCKY

privesc

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pth-toolkit

Modified version of the passing-the-hash tool collection (https://code.google.com/p/passing-the-hash/) made to work straight out of the box

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

red_team

Some scripts useful for red team activities

rootkits-list-download

This is the list of all rootkits found so far on github and other sites.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security-cheatsheets

A collection of cheatsheets for various infosec tools and topics.

startup

tplmap

Automatic Server-Side Template Injection Detection and Exploitation Tool