damaidec Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

arttoolkit.github.io

A RedTeam Toolkit

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

awsome-pentesting

My cheatsheet notes to pentest AWS infrastructure

azuregoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

best-readme-template

An awesome README template to jumpstart your projects!

bouncygate

Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL.DLL (as in RecycledGate).

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

callstackspoofingpoc

C++ self-Injecting dropper based on various EDR evasion techniques.

challenges_2022_public

Files + Writeups for DownUnderCTF 2022 Challenges

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

chimera

Automated DLL Sideloading Tool With EDR Evasion Capabilities

cloud-security-attacks

Azure and AWS Attacks

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

compile-obsidian

cve-2021-35587

Oracle Access Manager Unauthenticated Attacker Vulnerability CVE-2021-35587

cve-2022-27255

cve-2022-39952

CVE-2022-39952 Unauthenticated RCE in Fortinet FortiNAC

cve-2022-40684

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

cve-2023-32315

Openfire Console Authentication Bypass Vulnerability with RCE plugin

cve-2023-35001

Pwn2Own Vancouver 2023 Ubuntu LPE exploit

cvemap

Navigate the CVE jungle with ease.

dastardly-github-action

Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.

dcrat

A simple remote tool in C#.

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

fast-google-dorks-scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

fbi-tools

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

files

Directory for Hacxx Underground files

firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities