dsb4 Goto Github PK

msfpc

MSFvenom Payload Creator (MSFPC)

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

nmapautomator

A script that you can run in the background!

notes

A collection of useful notes and commands

oscp-stuff

List of Stuff I did to get through the OSCP :D

oscp_material

Material i gathered for the Offensive Security Certified Professional OSCP

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

pandoras-box

This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pen-test-resources

General Pen Testing Resources

pentest-notes

powerless

Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pwk-cheatsheet

python-exploits

Repository for python exploits

redteamcheatsheet

All the common commands used in a red teaming operation or CTF. This is a work in progress and will be updated with time.

reshell

Deployment debugging with hacker's tools.

rubeus

Trying to tame the three-headed dog.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

sqlcequery

A fast and lightweight tool for querying and manipulating SQLCE databases. This tool supports SQLCE versions 3.0, 3.1, 3.5 and 4.0

ssh-badkeys

A collection of static SSH keys (public and private) that have made their way into software and hardware products.

sudo_inject

[Linux] Two Privilege Escalation techniques abusing sudo token

sudo_killer

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo

uacme

Defeating Windows User Account Control

udp-proto-scanner

udp-proto-scanner is a Perl script which discovers UDP services by sending triggers to a list of hosts