d0ct0r-inf0s3c Goto Github PK

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

androidsecnotes

An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentesters, reverse engineer, and redteamers.

androspy

Androspy framework is a Backdoor Crypter & Creator with Automatic IP Poisener

awesome-api-security

A collection of awesome API Security tools and resources.

awesome-hacking-resources

A collection of hacking / penetration testing resources to make you better!

awesome-mobile-ctf

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.

cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

crapi

completely ridiculous API (crAPI)

csictf-2020

CTF Writeup - https://ctftime.org/event/1081

cve-2020-0796

Identifying and Mitigating the CVE-2020–0796 flaw in the fly

cve-2020-0796-rce-poc

CVE-2020-0796 Remote Code Execution POC

cve-2020-0797

cve-2022-40684

Fortinet Critical Authentication Bypass Vulnerability (CVE-2022-40684) [ Mass Exploit ]

dirhunt

Find web directories without bruteforce

drivesploit

drivesploit-testing

e-voting-with-django

The Voting System web application using Django is a project that serves as the automated voting system of an organization or school. This system works like the common manual system of election voting system whereas this system must be populated by the list of the positions, candidates, and voters. This system can help a certain organization or school to minimize the voting time duration because aside they can provide the voters an online platform to vote, the system will automatically count the votes for each candidate. The system has 2 sides of the user interface which are the administrator and voters side. The admin user is in charge to populate and manage the data of the system and the voter side which is where the voters will choose their candidate and submit their votes.

empire

Empire is a PowerShell and Python post-exploitation agent.

eternalblue-doublepulsar-metasploit

Module of Metasploit to exploit the vulnerability Eternalblue-Doublepulsar.

evilapp

Script to generate Android App that can hijack autenticated sessions in cookies

exploits

injection-tryhackme-exploit-script

musyoka101/Injection-TryHackMe-exploit-script

jasmin

Jasmin - Open source SMS gateway

jasmin-web-panel

📨 Jasmin Web Panel for Jasmin SMS Gateway

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

listmonk

High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

mercury

Mercury is a hacking tool used to collect information and use the information to further hurt the target

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests