r3ng4f Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adpeas

Powershell tool to automate Active Directory enumeration.

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

conti_202202_leak_procedures

This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.

crapi

completely ridiculous API (crAPI)

cve-2023-46604-rce-reverse-shell-apache-activemq

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

defcon-30-ctf

esportalv2

ESPortalV2 is a WiFi Captive Portal Credential Harvester (Phisher) for ESP8266 Devices. Fake a "Free WiFi HotSpot" with spoofed login pages.

graylog_extractors_pfsense

My Graylog Extractors for pfSense filterlogs

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

juicy-potato-x64

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

juicy-potato-x86

Juicy Potato for x86 Windows

kali-scripts

malwaredatabase

This repository is one of a few malware collections on the GitHub.

mimikatz

A little tool to play with Windows security

misc-powershell-stuff

random powershell goodness

mobsf-related-materials

MobSF related Presentations, Slides and Others.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

spike-fuzzer

Spike Fuzzer ( Spike for Archlinux ) && Audits

teams-for-linux

Unofficial Microsoft Teams for Linux client

vampi

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

wifiphisher

The Rogue Access Point Framework