handlerlee Goto Github PK

checklists

Red Teaming & Pentesting checklists for various engagements

command-injection-payload-list

🎯 Command Injection Payload List

dnsrecon

DNS Enumeration Script

dotfiles

my personal dotfile...

enum4linux

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts

ffuf

Fast web fuzzer written in Go

grok-1

Grok open release

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

metasploit-framework

Metasploit Framework

nifitemplate

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phantomjs

Scriptable Headless WebKit

pipedream

Connect APIs, remarkably fast. Free for developers.

powerlevel10k

A Zsh theme

rsactftool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

rsatool

rsatool can be used to calculate RSA and RSA-CRT parameters

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security

Stuff about it-security that might be good to know

sha1collisiondetection

Library and command line tool to detect SHA-1 collision in a file

sqlmap

Automatic SQL injection and database takeover tool

sublist3r

Fast subdomains enumeration tool for penetration testers

thc-hydra

hydra

the-art-of-command-line

Master the command line, in one page

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!