jayaram-yalla Goto Github PK

cheat-sheet---active-directory

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

checklists

Red Teaming & Pentesting checklists for various engagements

cloud-pentesting

This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.

cloud-security-encyclopedia

cloudfox

Automating situational awareness for cloud penetration tests.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

container-security-checklist

Checklist for container security - devsecops practices

conti_202202_leak_procedures

This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.

creepy

A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.

csirt-collect

PowerShell script to collect memory and (triage) disk forensics

cve-2021-27651-poc

RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2

cve-2022-21449-tls-poc

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

cve-2022-22965

Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5

cve-2022-42889-poc_text4shell

CVE-2022-42889-POC_TEXT4SHELL

cyberchef-recipes

A list of cyber-chef recipes and curated links

dark-web-osint-tools

OSINT Tools for the Dark Web

deepbluecli

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

devsecops-playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

digital-forensics-guide

Digital Forensics Guide

digital-forensics-lab

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

dontgo403

Tool to bypass 40X response codes.

dora

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

email-username-osint

ethical-hacking-labs

Practical Ethical Hacking Labs 🗡🛡

exploit-writing-for-oswe

Tips on how to write exploit scripts (faster!)