id3s3c Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-ios-resource

:iphone: A curated list of awesome iOS resources, including conferences, books, blogs, articles, websites and documentations

bhis-pdfs

bombcrypto-bot

This is a python bot that automatically logs in, clicks the new button, and sends heroes to work in the bombcrypto game. It is fully open source and free.

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

colabcat

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crosslinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

dpat

Domain Password Audit Tool for Pentesters

edrs

enterprisepurpleteaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

forgearmory

ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hacktricks-cloud

hat

HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems

havoc

The Havoc Framework

helk

The Hunting ELK

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

id3s3c.github.io

blog

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

karma

API pwndb

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

logstash-filter-ruby-scripts

A repository of scripts to be used with the logstash ruby filter

ms17-010

MS17-010

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.