5ub5i5t Goto Github PK

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

h4cks

Combination of all my Resources, Links & Scripts

hacktricks-cloud

kalilists

Repo of all the default wordlists included in Kali. Convienent if you're using something other than Kali.

kenzer

automated web assets enumeration & scanning

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

linux-privilege-escalation-resources

Compilation of Resources for TCM's Linux Privilege Escalation course

massvulscan

Bash script which quickly identifies open network ports and any associated vulnerabilities / Script Bash qui permet d'identifier rapidement les ports réseaux ouverts et les éventuelles vulnérabilités associées.

massvulscan4htb

Bash script specially create for the HackTheBox Platform and its web-based parrot linux instance Pwnbox.

metasploit-framework

Metasploit Framework

microscanner

Scan your container images for package vulnerabilities with Aqua Security

mythic

A collaborative, multi-platform, red teaming framework

nmap-vulners

NSE script based on Vulners.com API

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nuclei-templates-collection

Nuclei Templates Collection

okta-aws-lambda-node-react-example

AWS Lambda + React Example

one-liners

A collection of awesome one-liners for bug bounty hunting.

onelistforall

Rockyou for web fuzzing

open-source-intellingence-resources

Compilation of Resources from TCM's OSINT Course

oscp-pwk-notes-public

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

penetration-testing-cheat-sheet

Work in progress...

pimpmykali

Kali Linux Fixes for Newly Imported VM's

practical-ethical-hacking-resources

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

pwn-machine

The Pwning Machine

s3_using_terraform

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

straylight