git-sunburst-mako Goto Github PK

advent_of_code

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

checklists

Red Teaming & Pentesting checklists for various engagements

chisel

A fast TCP/UDP tunnel over HTTP

dirtycow.github.io

Dirty COW

go-keylogger

Keylogger lib implemented in Go, built for Windows

installerfiletakeover

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

mcafee-sitelist-pwd-decryption

Password decryption tool for the McAfee SiteList.xml file

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

php-reverse-shell

powercat

netshell features all in version 2 powershell

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

static-binaries

Various *nix tools built as statically-linked binaries

tetanus

:shell: A proof-of-concept reverse-shell written in rust.

vulscan

Advanced vulnerability scanning with Nmap NSE

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

xxe-injection-payload-list

🎯 XML External Entity (XXE) Injection Payload List