nxkennedy Goto Github PK

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

clickjack

Simple script to test for clickjacking

cofense-export-parser

Scripts to Parse Cofense/PhishMe Raw Exports

compromised

Tool for comparing a list of email addresses to the haveibeenpwned database to determine if they have been compromised in a public breach

compromised_pt2

Companion script to Compromised (https://github.com/nxkennedy/compromised). Compares list of breached accounts to Active Directory dump of 'Last Password Change' dates.

crazydict

Dict lists using in fuzzing.

cve-2019-8997

An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering maliciously crafted XML in an existing field.

deephack

deephack

dpat

Domain Password Audit Tool for Pentesters

eternal_blue_powershell

Port of eternal blue exploits to powershell

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

malware-1

Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code.

misc-scripts

miscellaneous scripts in mostly working order

nessus-mass_downloader

Download reports via the Nessus API

nessus-report-downloader

nexpose-automate_reports

Automatically dump tailored reports for each asset or site in your Nexpose installation using the Nexpose API

nexpose-mac_counter

Sheds light on asset detection accuracy by determining unique MACs found, assets missing MACs, dupes, and the 10 most common dupes.

nxkennedy.github.io

osint-framework

OSINT Framework

oswe-1

OSWE Preparation

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

php-reverse-shell

python-amazon-simple-product-api

A simple Python wrapper for the Amazon.com Product Advertising API

python-verodin-director-api-1

A simple Python wrapper for the Verodin Director API

quasarrat

Remote Administration Tool for Windows

risu-templates

Templates to extract failed DISA STIG checks from Nessus scan reports parsed by Risu