shadoxys Goto Github PK

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

activedirectoryenumeration

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

amsi-killer

Lifetime AMSI bypass

amsi_bypass_in_2023

Amsi Bypass payload that works on Windwos 11

amsiscanbufferbypass

Bypass AMSI by patching AmsiScanBuffer

api_wordlist

A wordlist of API names for web application assessments

aquatone

A Tool for Domain Flyovers

at-ps

Adversary Tactics - PowerShell Training

auto-gpt

An experimental open-source attempt to make GPT-4 fully autonomous.

awesome-waf

🔥 Web-application firewalls (WAFs) from security standpoint.

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

c-code-obfuscator

A basic python program to obfuscate c/c++ source files.

cloc

cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.

cloudflare_detect

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexec

A swiss army knife for pentesting networks

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

daredevil

Stealthy Loader-cum-dropper/stage-1/stager targeting Windows10

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

eaprimer

C# project to Reflectively load .Net assemblies in memory

edrs

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hacktricks-cloud