mclays Goto Github PK

.tmux

🇫🇷 Oh my tmux! My self-contained, pretty & versatile tmux configuration made with ❤️

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-gpt-agents

A curated list of GPT agents for cybersecurity

awesome-redteam-cheatsheet

Active Directory & Red-Team Cheat-Sheet in constant expansion.

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

awesome-waf

🔥 Everything about web-application firewalls (WAF).

azure-red-team

Azure Security Resources and Notes

bank-security-red-team

Some scripts useful for red team activities (Bank Security)

bug-bounty-wordlists

bypass-403

A simple script just made for self use for bypassing 403

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

certipy

Tool for Active Directory Certificate Services enumeration and abuse

command-line-quick-reference

quick reference on command line tools and techniques.

cve_prioritizer

CVE_Prioritizer combines CVSS, EPSS and CISAs Known Exploited Vulnerabilities to help you prioritize vulnerabilities

ddspoof

DDSpoof is a tool that enables DHCP DNS Dynamic Update attacks against Microsoft DHCP servers in AD environments.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dirsearch

Web path scanner

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

enum4linux

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts

eventlogging

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

fast-google-dorks-scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

get-badpasswords

Get insights into the actual strength and quality of passwords in Active Directory.

gpt3-and-cybersecurity

GPT-3 use cases for Cybersecurity

hardeningkitty

HardeningKitty - Checks and hardens your Windows configuration

hitch-hackers-guide-to-the-network

hugo-theme-docdock

Penetration Testing checklist

infosec-cheat-sheets

I do not own nor did I create these. I simply found publicly available cheat sheets and compiled a list for InfoSec students. This list contains a variety of screenshots for Tools/Networking Concepts/Cryptography/Linux Commands/OSINT/Python/etc.