sunandm Goto Github PK

payloads

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

powershellforpentesters

Course repository for PowerShell for Pentesters Course

puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

redcloud-os

RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)

redeye

RedEye is a visual analytic tool supporting Red & Blue Team operations

redteam-scripts

resources

Collection of resources I have used throughout my studies (cybersecurity and systems)

rubeus

Trying to tame the three-headed dog.

rusthound

Active Directory data collector for BloodHound written in rust. 🦀

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sessionprobe

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

smbeagle

stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

unja

Fetch & Filter Known URLs

vlan-hopping

Easy 802.1Q VLAN Hopping

vulnapi

Intentionaly very vulnerable API with bonus bad coding practices

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

vulnerable-api

Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops

wafer

webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

wifi-penetration-testing

Offensive Wireless - Wi-Fi Hacking

wifi-penetration-testing-cheat-sheet

Work in progress...

wifi-pentesting-guide

WiFi Penetration Testing Guide

wifibroot

A Wireless (WPA/WPA2) Pentest/Cracking tool. Captures & Crack 4-way handshake and PMKID key. Also, supports a deauthentication/jammer mode for stress testing

windows-wifi-extractor

Extract Windows Wi-Fi Passwords to Remote URL

wordpress-xmlrpc-brute-force-exploit

Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield

xmlrpc-exploit

Exploiting the xmlrpc.php on all WordPress versions

xnlreveal

A Chrome browser extension to show alerts for relfected query params, show hidden elements and enable disabled elements.

zap-scripts

Zed Attack Proxy Scripts for finding CVEs and Secrets.