blakduk Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

advisories

ahihi

astra

Automated Security Testing For REST API's

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-arsenal

A collection of red team and adversary emulation resources developed and released by MITRE.

attacker-group-predictor

Tool to predict attacker groups from the techniques and software used

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-incident-response

A curated list of tools for incident response

awesome-red-teaming

List of Awesome Red Teaming Resources

awesomexss

Awesome XSS stuff

badsecrets

A library for detecting known secrets across many web frameworks

beaker

Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

burploaderkeygen

Burp Suite Pro Loader & Keygen ( BurpSuite version v2020.1 - ∞ )

burpsuite-team-extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

caldera

Automated Adversary Emulation

capsulecorp-pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cobaltstrike

CobaltStrike's source code

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

ctf

Ctf solutions from p4 team

ctfplatform

CTF platform we wrote and used for justCTF 2019

cve-2023-36745

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

edrsandblast