totoroha Goto Github PK

cheatsheets

Helped during my OSCP lab days.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

chromium-941743

Chrome v8 1Day Exploit by István Kurucsai

cis-ubuntu-packer

CIS Hardened Ubuntu Docker Image

clair

Vulnerability Static Analysis for Containers

cloud-pentest

Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud

cloudcopy

This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.

creddump7

credgrap_ie_edge

Extract stored credentials from Internet Explorer and Edge

credninja

A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB, plus now with a user hunter

cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

ctf-wiki

Hacking techniques useful during CTFs

ctf-writeups

CTF write-ups from the VulnHub CTF Team

ctisearch

Cyber Threat Intel PowerShell Script

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

cve-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

cve-in-ruby

Exploits written & ported to Ruby - no Metasploit

cybersecurity_strategies

Machine-based Text Analytics of CyberSecurity Strategies

danger-zone

Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.

deepbluecli

defenderkeys

Quick PowerShell script to extract any exclusions configured for Windows Defender

dirble

Fast directory scanning and scraping tool

dirsearch

Web path scanner

dnspy

.NET assembly editor, decompiler, and debugger

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

dostoevsky-pentest-notes

There may be inaccuracies as I'm still learning, mostly based on my interpretation thus far

dumpsterfire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

empire-xss-files

Someone tried to push a fake Tor Browser update via XSS injection on Empire Market profiles.

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

env_linux

My Linux Environment starter