cwaazywabbit Goto Github PK

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

panoptis2016-mobile

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

photon

Incredibly fast crawler designed for recon.

presentations

My presentations from different conferences

pyrdp

RDP man-in-the-middle and library for Python 3 with the ability to watch connections live or after the fact

python-pentest-tools

Python tools for penetration testers

reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

redteaming

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

safetykatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seth

Perform a MitM attack and extract clear text credentials from RDP connections

sharpdump

SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.

sharpup

SharpUp is a C# port of various PowerUp functionality.

sharpwmi

SharpWMI is a C# implementation of various WMI functionality.

shellcodecompiler

Shellcode Compiler

shellcoder

Generates shellcodes from a given assembly code and formats the output in a way that makes the shellcoder's life easier to eliminate bad-chars, enhance opcodes, etc.

shellcodes

Portable, NULL-free, Position-Independent (PIC) and highly optimized shellcodes for exploit development.

smbetray

SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.

sublist3r

Fast subdomains enumeration tool for penetration testers

symboliclink-testing-tools

uacme

Defeating Windows User Account Control

unlocker

unmarshalpwn

POC for CVE-2018-0824

win-sec-check

Tool to enumerate potential security misconfigurations, allowing for privilege escalation on a windows machine.

windows-privesc-check

Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

xposed

xxe

References for XXE