isarabia92 Goto Github PK

oscp_cheatsheet

Commands, snippets, exploits, tools, lists, collections and techniques I used on my journey to becoming an OSCP.

osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

pathbrute

Pathbrute

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

penglab

Abuse of Google Colab for cracking hashes. 🐧

pentest-book

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

phishingtemplates-page-sensibilisation

This is a collection of phishing templates and a landing page to be used with goPhish

photon

Incredibly fast crawler designed for OSINT.

php-exploit-scripts

A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

plumhound

Bloodhound for Blue and Purple Teams

powershell-for-pentesters

PowerShell for Pentesters

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

ppldump

Dump the memory of a PPL with a userland exploit

pplkiller

Tool to bypass LSA Protection (aka Protected Process Light)

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

privesccheck

Privilege Escalation Enumeration Script for Windows

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pwndoc

Pentest Report Generator

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

quick-cheatsheet

Quick Command Cheatsheet, you can import/open directly to you ONE NOTE.

quickpress

Small tool to automate SSRF wordpress and XMLRPC finder

quickxss

Automating XSS using Bash

rce-finder

A tool to find good RCE

rdpthief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

reconftw

Simple script for full recon

red_team

Some scripts useful for red team activities