htoochonaung Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

an-intro-2-win-ed

"An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast Missouri State University Cyber Range- based off of my exploit development highs and lows over the past few years.

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

awe-osee-prep

Advanced Windows Exploitation/Offensive Security Exploitation Expert Preparation for Black Hat 2021

awesome-k8s-security

A curated list for Awesome Kubernetes Security resources

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azure_for_red_team

azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

cartography

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

cheatsheets

Random pentest notes. Use your Ctrl-F to navigate around

cloud-pentesting

This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.

cloud-security-remediation-guides

Security Remediation Guides

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

conptyshell

ConPtyShell - Fully Interactive Reverse Shell for Windows

cve-2020-1337-poc

poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)

cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2021-33739-poc

cve-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

deimosc2

DeimosC2 is a Golang command and control framework for post-exploitation.

detection-rules

Rules for Elastic Security's detection engine

doxycannon

A poorman's proxycannon and botnet, using docker, ovpn files, tor nodes, and dante socks5 proxies

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

enum_for_all

exocet-av-evasion

EXOCET - AV-evading, undetectable, payload delivery tool

exploit

exploitdb-bin-sploits

Exploit Database binary exploits located in the /sploits directory

fake-sms

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

gdi-palettes-exp

DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects

go-for-oscp