graypwn Goto Github PK

3snake

Tool for extracting information from newly spawned processes

active-directory-pentest

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

android-attack-defense

Lab Material for Android Attack & Defense Course

aspx-reverse-shell

Aspx reverse shell

attacksurfaceanalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

awae-oswp

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome-cobaltstrike-defence

Defences against Cobalt Strike

awesome-exploit-development

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

awesome-nginx-security

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)

awesome-windows-domain-hardening

A curated list of awesome Security Hardening techniques for Windows.

awesome-windows-kernel-security-development

windows kernel security development

aws-load-balancer-controller

A Kubernetes controller for Elastic Load Balancers

bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

bypass-403

A simple script just made for self use for bypassing 403

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

chisel

A fast TCP/UDP tunnel over HTTP

cli

React Native command line tools

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

create-react-native-app

Create a React Native app that runs on iOS, Android, and web

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cve-2021-32099

CVE-2021-32099

cve-2021-3493

Ubuntu OverlayFS Local Privesc

danderspritz_lab

A fully functional DanderSpritz lab in 2 commands

drozer

The Leading Security Assessment Framework for Android.

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

egesploit

EGESPLOIT is a golang library for malware development