iamtecheater Goto Github PK

5pillars

A guide on how to become an Information (or Cyber) Security Professional. With resources from free to expensive.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adgenerator

Active Directory Generator files for Movement, Pivoting, and Persistence for Pentesters and Ethical Hackers.

attacksurfaceanalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

azureadassessment

Tooling for assessing an Azure AD tenant state and configuration

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

badchars

Bad char generator to instruct encoders such as shikata-ga-nai to transform those to other chars.

bettermap

Automated solution for nmap'ing

bhg

Code samples for No Starch Press Black Hat Go

birthday-records

blocksec-ctfs

A curated list of blockchain security Capture the Flag (CTF) competitions

bloodhound

Six Degrees of Domain Admin

booklist

breach-parse

A tool for parsing breached passwords

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

car_game

card-components

chat-hub

chathubapp2

cloudpeler

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

contosocrafts

count-upwards-timer

countdown-timer

I just wanted to show how a countdown timer works

counter-app

crackmapexec

A swiss army knife for pentesting networks

crowdsec

CrowdSec - the open-source and participative IPS able to analyze visitor behavior & provide an adapted response to all kinds of attacks. It also leverages the crowd power to generate a global CTI database to protect the user network.

crt.sh

Shell script to obtain information from https://crt.sh

crt.sh-1

(Unofficial) Python API for https://crt.sh

cve-2022-40684

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager