bbacelar05 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

amass

In-depth Attack Surface Mapping and Asset Discovery

android-pin-bruteforce

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

aquatone

A Tool for Domain Flyovers

aria2-onion-downloader

Download from .onion-domains more quickly.

assetfinder

Find domains and subdomains related to a given domain

autoresponder

Carbon Black Response IR tool

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

awesome-red-teaming

List of Awesome Red Teaming Resources

beef

The Browser Exploitation Framework Project

bloodhound

Six Degrees of Domain Admin

chell

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cloudpeler

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

colabcat

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

crosslinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

cu-gir

Cyber Underground General Intelligence Requirements

cve-2019-15107

Webmin <=1.920 RCE

cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

dehashquery

A script used to query the dehashed API and filter for more useful results

devsecops-playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

dionaea

Home of the dionaea honeypot

dirsearch

Web path scanner

dnspooq

DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)

easy-xss-cookie-stealer

XSS cookie stealer using JavaScript and PHP

elasticsearch-logstash-kibana-docker-compose

Create ELK stack using Docker Compose

eternalliberty

event2timeline

Simple Microsoft Windows sessions event logs visualization