faidamine Goto Github PK

h1domains

HackerOne "in scope" domains

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

how2heap

A repository for learning various heap exploitation techniques.

http-script-generator

ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

impacket

Impacket is a collection of Python classes for working with network protocols.

infosec_reference

An Information Security Reference That Doesn't Suck

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

lnkup

Generates malicious LNK file payloads for data exfiltration

mcsc16

meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

mkt-py

ms17-010

MS17-010

ms17-010-m4ss-sc4nn3r

MS17-010 multithreading scanner written in python.

ms17-010-python

MS17-010: Python and Meterpreter

mssp-ctf-2017

netcat

NetCat for Windows

numpy-100

100 numpy exercises (100% complete)

openluck

OpenFuck exploit updated to linux 2018 - Apache mod_ssl < 2.8.7 OpenSSL - Remote Buffer Overflow

oscp-archives

An archive of everything related to OSCP

osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

panel-tracker

pappy-proxy

An intercepting proxy for web application testing

patchman

Patchman is a Linux Patch Status Monitoring System

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest

:no_entry: offsec batteries included

pentest-guide

Penetration tests cases, resources and guidelines.

pentest-notes

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

pentesting-toolkit

Tools for pentesting, CTFs & wargames.

pentestpackage

a package of Pentest scripts I have made or commonly use