nashnsulthan Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

bsides-2017-ctf-docker

BSidesCBR CTF docker compose files

chrome-android-and-windows-0day-rce-sbx

Chrome Android and Windows 0day RCE+SBX.. DPRK

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

ctf-notes

Everything needed for doing CTFs

ctf-tools

Some setup scripts for security research tools.

dnscan

drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

evilgrade

featherduster

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

festin

FestIn - S3 Bucket Weakness Discovery

firmware_security_docs

fonttest

hacker-roadmap

:pushpin: A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security.

leaklooker

Find open databases - Powered by Binaryedge.io

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

mythic

A collaborative, multi-platform, red teaming framework

name-that-hash

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 3000+ other hashes ☄ Comes with a neat web app 🔥

one-lin3r

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

pythem

pentest framework

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

security-tool-chest

A list of useful security and obvescation tools useful for red and blue teaming activities. A list made possible by the provided references.

shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR