bbhunter Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-scanning-techniques

A compilation of network scanning strategies to find vulnerable devices

activity-trail-log

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

ad-pentesting-notes

ad-quick-install

ad-security-workshop

Resources for our Active Directory security workshops

adapt

ADAPT is a tool that performs automated Penetration Testing for WebApps.

adbsploit

A python based tool for exploiting and managing Android devices via ADB

adenum

AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos.

adhrit

Adhrit is an open source Android APK reversing and analysis tool that can help security researchers and CTF enthusiasts alike. The tool is an effort to cut down on the amount of time spent on reversing and basic reconnaissance of Android applications.

admin-scanner

This tool is design to find admin panel of any website by using custom wordlist or default wordlist easily

adpeas

Powershell tool to automate Active Directory enumeration.

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

adsec

An introduction to Active Directory security

advanced-search-operators-list

List of the links to the docs for different services, which explain using of advanced search operators

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

advisories

advisories-1

Security Advisories

aem-hacker

aem-list

aem-rce-bundle

aes-killer

Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly

affinis

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation and more.

aioresolver

Fast dns resolver

airopy

Get clients and access points.

airstrike

Automatically grab and crack WPA-2 handshakes with distributed client-server architecture

akamai-arl-hack

Script to test open Akamai ARL vulnerability.