jrandomsage Goto Github PK

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

striker

Striker is an offensive information and vulnerability scanner.

striptls

proxy poc implementation of STARTTLS stripping attacks

struts-pwn

An exploit for Apache Struts CVE-2017-5638

struts-pwn_cve-2018-11776

An exploit for Apache Struts CVE-2018-11776

stunner

Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sublist3r

Fast subdomains enumeration tool for penetration testers

suborner

sweetbabyscan

Red Tools 渗透测试

sweetsecurity

Network Security Monitoring on Raspberry Pi type devices

swordphish

Schillings SwordPhish empowers organisations and engages its employees to establish the key component of any cyber security strategy: the Human Firewall.

swordphish-awareness

Swordphish Phishing Awareness Tool

syscall-example

Using syscall to load shellcode, Evasion techniques

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

tactical-exploitation

Modern tactical exploitation toolkit.

taipan

Web application security scanner

tartarusgate

TartarusGate, Bypassing EDRs

tasa

A simple framework for distributed task workflow using redis.

tcp-starvation

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

technical-whitepapers

Collection of IT whitepapers, presentations, pdfs; hacking, web app security, db, reverse engineering and more; EN/PL.

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the-hackers-hardware-toolkit

The best hacker's gadgets for Red Team pentesters and security researchers.

the-onion-diaries

Blog-type notes about building Onion sites

the-soc-shop

Repository of scripts/tools that may be useful in Security Operations Centres (SOC)

thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

thetick

A simple embedded Linux backdoor.