reket99 Goto Github PK

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adminbomber

bruteforce the admin panel

adpeas

winPEAS, but for Active Directory

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

aort

All in One Recon Tool for Bug Bounty

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

automatic-proxylogon-exploit

Automatic OWA Proxylogon Exploit

awesome-bugbounty-tools

A curated list of various bug bounty tools

bbot

OSINT automation for hackers.

broken-link-checker

Find broken links, missing images, etc within your HTML.

bug-bounty-automation

bug-bounty-methodology

These are my checklists which I use during my hunting.

bypass-url-parser

bypass-url-parser

cisco_cve-2023-20198

cloud_pentesting_overview

Cloud Pentesting Resource Collection

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

config

config

custom-bloodhound-queries

cve-2020-1472

Test tool for CVE-2020-1472

cve-2022-44268-imagemagick-arbitrary-file-read-poc

CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator

cve-2022-44877

cve-2023-23397

Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.

cve-2023-23397-poc-powershell

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

dns_tunneling

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

dnsreaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

donpapi

Dumping DPAPI credz remotely