tanphamit4vn Goto Github PK

amazing-project

audit_files

Nessus Audit files

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-red-teaming

List of Awesome Red Teaming Resources

calproject

zyx

checklists

Pentesting checklists for various engagements

confluence_cve-2021-26084

Remote Code Execution on Confluence Servers : CVE-2021-26084

cookieheist

PHP Cookie Stealing Scripts for use in XSS

cve-2018-7600

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

glpi

GLPI is a Free Asset and IT Management Software package,ITIL Service Desk, licenses tracking and software auditing.

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

jsearch

jshielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

kernel-exploits

knock

Knock Subdomain Scan

linux-exploit-binaries

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

myautomationapp

mykmstests

nmapautomator

A script that you can run in the background!

ntdsaudit

An Active Directory audit utility

oscp-note

list of useful commands, shells and notes related to OSCP

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetrationtesting-notes

Penetration Testing (eCPPT) Notes and SOP