zorroroot Goto Github PK

lazy-redteamer-scripts

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

learn-regex

Learn regex the easy way

legion

Automatic Enumeration Tool based in Open Source tools

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

log4j-rce-scanner

Remote command execution vulnerability scanner for Log4j.

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

logrotten

loki

Loki - Simple IOC and Incident Response Scanner

lol-pwn

Free Course Materials for LOL-Pwn

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

malware-ioc

Indicators of Compromises (IOC) of our various investigations

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

mango_blind_injection.py

NOSQL blind injection

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

metasploit-framework

Metasploit Framework

metasploit-plugins

Plugins for Metasploit Framework

microsoft-365-defender-hunting-queries

Sample queries for Advanced hunting in Microsoft 365 Defender

mimikatz

A little tool to play with Windows security

misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.