kopfjager007 Goto Github PK

offensive_macos

Tracking of offensive macOS tooling, blogs, and related helpful information

office-dde-payloads

Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.

ohmyzsh

🙃 A delightful community-driven (with 2,000+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

osrframework

OSRFramework, the Open Sources Research Framework is a AGPLv3+ project by i3visio focused on providing API and tools to perform more accurate online researches.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

pe_to_shellcode

Converts PE into a shellcode

penelope

Penelope Shell Handler

petitpotam

phant0m

Windows Event Log Killer

pkinittools

Tools for Kerberos PKINIT and relaying to AD CS

polenum

Uses Core's Impacket Library to get the password policy from a windows machine

portbender

TCP Port Redirection Utility

powershdll

Run PowerShell with rundll32. Bypass software restrictions.

powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

powerzure

PowerShell framework to assess Azure security

printnightmare

proxify

Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

pspkiaudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

pwnedornot

OSINT Tool for Finding Passwords of Compromised Email Addresses

pwnkit

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

pwntools

CTF framework and exploit development library

pwnyform

pymeta

Pymeta will search the web for files on a domain to download and extract metadata. This technique can be used to identify: domains, usernames, software/version numbers and naming conventions.

python-dsstore

A library for parsing .DS_Store files and extracting file names

rdp-sec-check

rdp-sec-check is a Perl script to enumerate security settings of an RDP Service (AKA Terminal Services)