brukusec Goto Github PK

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

allthethingsexec

Executes Blended Managed/Unmanged Exports

api_wordlist

A wordlist of API names for web application assessments

apkleaks

Scanning APK file for URIs, endpoints & secrets.

ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-teaming

List of Awesome Red Teaming Resources

aws-iam-privilege-escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

backstab

A tool to kill antimalware protected processes

bitblinder

Burp extension helps in finding blind xss vulnerabilities

blackout

kill anti-malware protected processes (BYOVD)

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

bountystrike-sh

Poor (rich?) man's bug bounty pipeline

bugbounty

RepoToStoreBugBountyInfo

burpsuite_payloads

Payloads to be used with Burp Suite Intruder. (Originally found on swisskeyrepo-PayloadsAllTheThings)

burpsuite_payloads-1

byp4xx

Simple bash script to bypass "403 Forbidden" messages with well-known methods discussed in #bugbountytips

bypass-amsi

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cimplant

C# port of WMImplant which uses either CIM or WMI to query remote systems

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

cs-501-2021

def-con-links

Easy links and guides for DEF CON 28 Safemode

dirty-vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

dllsideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

dorkx

Pipe different tools with google dork Scanner