gamra01 Goto Github PK

black-hat-rust-bonuses

Deep dive into offensive security with the rust programming language - Early access

byob

An open-source post-exploitation framework for students, researchers and developers.

command-injection-payload-list

🎯 Command Injection Payload List

cve-2007-2447

CVE-2007-2447 - Samba usermap script

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

ejpt

My notes taken during eJPT labs - in preparation for the exam

ejpt-1

Some knowledge learnt during the eJPT studying.

fast-google-dorks-scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

goad

game of active directory

ilyasstempl

knowledgebase

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

matchmaking

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

msdt-follina

Codebase to generate an msdt-follina payload

newairbnbpj

osce-complete-guide

OSWE, OSEP, OSED

oscp

OSCP Guide

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

php-reverse-shell

planteconnecte

portfolio-ilyass

prettier-vscode

Visual Studio Code extension for Prettier

react-front-techweb

redteam-offensivesecurity

Tools & Interesting Things for RedTeam Ops

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sitevitrine

sublist3r

Fast subdomains enumeration tool for penetration testers