jaxmayhem Goto Github PK

oscp2020

Tools and scripts written for personal use

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pen-test-reports_walk-throughs

A collection of oenetration test reports and walkttrough for various practice box engagements conducted while preparing to take the OSCP certification.

pentesting

Pentesting Cheatsheets and Guides

pentesting-scripts

A ton of helpful tools

pivotsuite

Network Pivoting Toolkit

powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

pwnagotchi

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

q

Exploit Pack for Metasploit - Collection of modules gathered across time and internets

rapidscan

:new: The Multi-Tool Web Vulnerability Scanner.

reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

red-team-scripts

A collection of Red Team focused tools, scripts, and notes

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

rubber_ducky_gather_network_info

:hatched_chick: :hatched_chick: :hatched_chick: A very quickly script for rubber ducky which exploits the gatherNetworkInfo.vbs file in the C: \ Windows \ System32 folder to steal different information from the victim machine. It Requires twin Duck Firmware :hatched_chick: :hatched_chick: :hatched_chick:

scriptsandcommands

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shr3dkit

Red Team Tool Kit

sn1per

Automated pentest framework for offensive security experts

usb-rubber-ducky

usbattackworkshop

USBAttackWorkshop

vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

wmduckies

An exploit framework for the USB Rubber Ducky.

xsstrike

Most advanced XSS scanner.