superkojiman Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

crack_wep

Automated WEP cracking script.

create-dmg

Create a good-looking DMG for your macOS app in seconds

ctf-events

Information about CTF events hosted by Defcon Toronto.

ctf-pwn-tips

Here records some tips about pwn.

cve-2018-7600

CVE-2018-7600 - Drupal 7.x RCE

dc416-exploitdev-intro

Files for the Defcon Toronto Introduction to 64-bit Linux Exploitation

ddcctl

DDC monitor controls (brightness) for Mac OSX command line

defcon416

Slides for my DefCon416 talk

dirtshell

Provide a sort of shell-ish interface to make file directory traversal quicker and easier.

filetype

Small, dependency-free, fast Go package to infer file types based on the magic numbers signature

gallimaufry

Command Line Parsing Library for USB PCAP Files

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gopsutil

psutil for golang

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

js2pdfinjector

Inject a JS file into a PDF file.

kernel-exploits

libc-database

Build a database of libc offsets to simplify exploitation

libformatstr

Simplify format string exploitation.

mass_deauth

Script to mass deauthenticate multiple wireless clients.

metagoofil

An updated version of metagoofil

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

open-golang

Open a file, directory, or URI using the OS's default application for that object type. Optionally, you can specify an application to use.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peepshow

Script that captures login credentials on a laptop acting as a Wi-Fi access point.

platypus

Create Mac applications from command line scripts

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

pwn-machine

The Pwning Machine