psc4re Goto Github PK

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

attack-surface-framework

Tool to discover external and internal network attack surface

attacking-and-auditing-docker-containers-and-kubernetes-clusters

Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters

blurcaptcha

cve-2016-2107

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

documentation

DefectDojo Documentation

fierce-domain-scanner

Fierce.pl Domain Scanner

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

gitrob

kernel

mimikatz-private

A little tool to play with Windows security

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

msf-installer

Script to help with installing and configuring Metasploit Framework, Armitage and the Plugins I have written on OSX and Linux

nessus-report-downloader

nmaptocsv

A simple python script to convert Nmap output to CSV

nse-scripts

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

nuclei-templates

Custom Nuclei Templates

poshsec

The main PoshSec repository.

ppn

Pentester's Promiscuous Notebook

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

quick-scripts

A collection of my quick and dirty scripts for vulnerability POC and detections

radare2-workshop-2015

sampleforgitsecrets

sample

shhgit

Ah shhgit! Find GitHub secrets in real time

sites-using-cloudflare

:broken_heart: List of domains using Cloudflare DNS (potentially affected by the CloudBleed HTTPS traffic leak)

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

springcore0day

SpringCore0day from https://share.vx-underground.org/

ssllabs-scan