taipansec Goto Github PK

3xpl01t5

Random Exploits

appsec_gitleaks

Protect and discover secrets using Gitleaks 🔑

askingcreds

PowerShell script used to steal user/admin Windows password simply by asking the user

autosuid

AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges.

azurerbac

Docs and samples about privileged identity and access management in Azure

barq_aws

barq: The AWS Cloud Post Exploitation framework!

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bettersafetykatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

bugbounty

c2_azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

cartography

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloud-azure-usefulscripts

A collection of useful scripts

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

cve-2020-8165

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

d1rklrd

Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time

devops-exercises

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

embedinhtml

Embed and hide any file in an HTML file

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

exploit_code

Scripts that would help while pentesting

hivenightmare

Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

installerfiletakeover

javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

javhack

log4j-detect

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

log4jnuclei

Log4j for nuclei

markdown

Learn how to use Markdown