notsoethical Goto Github PK

-cve-2017-9805

Exploit script for Apache Struts2 REST Plugin XStream RCE (‎CVE-2017-9805)

aclpwn.py

Active Directory ACL exploitation with BloodHound

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aggressor-script

Collection of Aggressor Scripts for Cobalt Strike

arachni

Web Application Security Scanner Framework

arch-scripts

Some scripts for Arch Linux administation tasks

autocomplete

IDE-style autocomplete for your existing terminal & shell

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 500+ posts and videos.

awesome-cyber-skills

A curated list of hacking environments where you can train your cyber skills legally and safely

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-teaming

List of Awesome Red Teaming Resources

aws-iam-privilege-escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

b374k

PHP Webshell with handy features

backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

bashcheck

test script for shellshocker and related vulnerabilities

beef

The Browser Exploitation Framework Project

beef-api

Python library that facilitates interfacing with BeEF via it's RESTful API

braindamage

Remote administration tool which uses Telegram as a C&C server

brootkit

Lightweight rootkit implemented by bash shell scripts v0.10

cobaltstrike-toolkit

Some useful scripts for CobaltStrike

conky-gr33n

Conky config for everyone who likes a lot of green

cpickleexploitexample

Simple and easy to understand cPickle deserialization vulnerability example.

ctf

Capture The Flag

ctf-1

cve-2015-1538-1

An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

cve-2020-12078

The official exploit for Open-AudIT v3.3.1 Remote Code Execution CVE-2020-12078

deathstar

Automate getting Domain Admin using Empire (https://github.com/EmpireProject/Empire)

demorepo