acknowledgehim Goto Github PK

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lolbas-1

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lsassy

Remotely parse lsass dumps and extract credentials

mailsniper

forked from dafthack

masscan-web-ui

MASSCAN Web UI

mitmf

Framework for Man-In-The-Middle attacks

msf-autoshell

Feed the tool a .nessus file and it will automatically get you MSF shell

mwcrawler

Updated Malware Crawler to populate repositories

natlas

natlas - Network Discovery and Auto-Diagramming

ncentraldumpsterdiver

This application utilized the Self Registration feature to create a rogue agent that then dumps ApplianceConfiguration settings which may or may not contain information such as plain text passwords. This was reported to SolarWinds PSIRT on 10/10/2019 with very little feedback.

net-creds

Sniffs sensitive data from interface or pcap

nps_payload

This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091) Payload written by Ben Mauch (@Ben0xA) aka dirty_ben

panhunt

PANhunt searches for credit card numbers (PANs) in directories.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pci-audit-script

pci-dss-compliance-toolkit

The PCI DSS Compliance Toolkit is an open-source project aimed at helping organizations achieve and maintain compliance with the (PCI DSS). This toolkit provides essential resources, tools, and documentation to streamline the compliance process, ensuring the secure handling of cardholder data.

peasant

LinkedIn reconnaissance tool

pentest-machine

Automates some pentest jobs via nmap xml file

pentesting-bible

articles

petitpotam

phantom-evasion

Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)

photon

Incredibly fast crawler designed for OSINT.

poc

Proof of Concepts

powermeta

forked from dafthack

powermeta-1

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

powershell-pci-compliance

This Powershell script can be used to configure the local computer policy to the configurations specified in the Tenable PCI Compliance Audit file (https://www.tenable.com/downloads/audit).

prowler

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

pyfuscation

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

pygpoabuse

Partial python implementation of SharpGPOAbuse

pypsrp

PowerShell Remoting Protocol for Python