kudaydotsite Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

admodule

Microsoft signed ActiveDirectory PowerShell module

adsi

Active Directory Searcher helper

asreproast

Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

bashloop

bashLoop

binexp

Linux Binary Exploitation

bloodhound

Six Degrees of Domain Admin

churrasco

Changes for Visual Studio 2013

cve-2019-12384

Jackson Rce For CVE-2019-12384

cve-2020-1472

Test tool for CVE-2020-1472

cve-2020-1473

Exploit Code for CVE-2020-1472 aka Zerologon

firebaseornekleri

Firebase ile ilgili okuduğu kitaplardan, notlar içindir.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

geckodriver

WebDriver for Firefox

git-dumper

A tool to dump a git repository from a website

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gobuster

Directory/File, DNS and VHost busting tool written in Go

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

heartbleed-poc

Test for SSL heartbeat vulnerability (CVE-2014-0160)

iis6-exploit-2017-cve-2017-7269

iis6 exploit 2017 CVE-2017-7269

impacket

Impacket is a collection of Python classes for working with network protocols.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

jwt-lab

JWT'ye yönelik saldırılar için eğitimlerde kullandığım bir uygulama

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kernel-exploits

kernelpop

kernel privilege escalation enumeration and exploitation framework

keychainprotection2

If our clients remove app from device even, keychain datas still will be store in device. As a result we have to check keychain in first launch.

lfi-files

Wordlist to bruteforce for LFI