kingofthebeat Goto Github PK

php-vulnerability-audit-cheatsheet

This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.

pmapper

A tool for quickly evaluating IAM permissions in AWS.

policies

Datica HIPAA Compliance Policies

powersharppack

powershell-obfuscation-bible

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.

powerzure

PowerShell framework to assess Azure security

privacy.sexy

Open-source tool to enforce privacy & security best-practices on Windows and macOS, because privacy is sexy 🍑🍆

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

purplepanda

Identify privilege escalation paths within and across different clouds

rcescanner

Simple python script to extract unsafe functions from php projects

re-ios-apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

red-baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

red-team-management

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

red_team_tool_countermeasures

redboto

Red Team Scripts for AWS.

redcloud

Automated Red Team Infrastructure deployement using Docker

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

redteamops

redteamops-havoc-101

Materials for the workshop "Red Team Ops: Havoc 101"

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

reverse-engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

rombuster

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

rottenpotato

RottenPotato local privilege escalation from service account to SYSTEM

runhijackhunter

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

samlists

Free, libre, effective, and data-driven wordlists for all!

scan4all

Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty...

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.