mark-ppb Goto Github PK

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

bloodhound

Six Degrees of Domain Admin

cheatsheets

Penetration Testing/Security Cheatsheets

chuckle

An automated SMB relay exploitation script.

cmty-nexpose-checks

Nexpose Community vulnerability checks

deepbluecli

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

empire

Empire is a PowerShell and Python post-exploitation agent.

firephish

FirePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

guide

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

infosec_reference

An Information Security Reference That Doesn't Suck

internal-pentest-playbook

Internal Network Penetration Test Playbook

lazagne

Credentials recovery project

metta

An information security preparedness tool to do adversarial simulation.

nexpose-sql-queries

custom nexpose sql export queries

nexpose_sql_queries

oscp

oscp-cheat-sheet

list of useful commands, shells and notes related to OSCP

pentestkit

Useful tools and scripts for Penetration Testing

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

pwnwiki.github.io

PwnWiki - The notes section of the pentesters mind.

red-baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

veil

Veil is the superproject containing all tools in the Veil-Framework

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.