pentestmafia Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

amass

In-depth DNS Enumeration and Network Mapping

astra

Automated Security Testing For REST API's

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-asset-discovery

List of Awesome Asset Discovery Resources

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

bandit

Bandit is a tool designed to find common security issues in Python code.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

burp-vulners-scanner

Vulnerability scanner based on vulners.com search API

c2

O projeto C2 visa desenvolver uma coleção de links uteis.

c4

checklists

Pentesting checklists for various engagements

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

commix

Automated All-in-One OS command injection and exploitation tool.

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

dirsearch

Web path scanner

dirtycow.github.io

Dirty COW

disable-windows-defender

Changing values to bypass windows defender C#

domlink

A tool to link a domain with registered organisation names and emails, to other domains.

flyingafalseflag

Slides and Code for the BHUSA 2019 talk: Flying a False Flag

graph-ql

GraphQL Security Research Material

hacker

Hacker is a Jekyll theme for GitHub Pages

hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

hunt

impacket_static_binaries

Standalone binaries for Linux/Windows of Impacket's examples

invoke-powercloud

Deliver powershell paylods via DNS TXT via CloudFlare using PowerShell

leettime

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks