d4rkz3ro Goto Github PK

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

amass

In-depth Attack Surface Mapping and Asset Discovery

azure-red-team

Azure Security Resources and Notes

azure_workshop

badzure

bugz-tools

A collection of tools I wrote for bug bounty or hacking and don't mind publishing it :smile:

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

credphish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

cve-2021-40444

CVE-2021-40444 PoC

cyfon

bug bounty pull all subdomain data, hacker tools

dotfiles

My personal dotfiles

falconstrike

A stealthy, targeted Windows Loader for delivering second-stage payloads(shellcode) to the host machine undetected

lambda_iam_enum

methodology

microburst

A collection of scripts for assessing Microsoft Azure security

ninja_uuid_dropper

Module Stomping, No New Thread, HellsGate syscaller, UUID Dropper for x64 Windows 10!

offsec_we

learning case to prepare OSWE

okta-authentication

This repo contains the code to automate Okta Authentication flow

okta_authentication_mfa_flow

Sample docs and Postman Collection for using Okta's Authentication API and Factors API.

oscp

pentest-book

php-binary-bugs

PHP binary bugs advisory

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

pssw100avb

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

reconnaissance

Subdomain recon .bash_profile for memN0ps

scanning

tools