me009 Goto Github PK

cheatsheets

Penetration Testing/Security Cheatsheets

conti-leaks-englished

Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.

covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

crtp-notes

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

cve-2019-11708

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2021-1675

Impacket implementation of CVE-2021-1675

cyberrange

A space to store the setup of an open-source penTest Lab

deepbluecli

defendercheck

Identifies the bytes that Microsoft Defender flags on.

dejavu

DejaVU - Open Source Deception Framework

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

didierstevenssuite

Please no pull requests for this repository. Thanks!

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

easysploit

EasySploit - Metasploit automation (EASIER and FASTER than EVER)

enterprisepurpleteaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study. Doctor of Science Cybersecurity at Marymount University Dissertation by Xena Olsen.

epv-api-scripts

These API scripts enable CyberArk users to automate privileged account management task like account creation, user management, and more.

eventlist

EventList

eviloffice

Inject Macro and DDE code into Excel and Word documents (reverse shell)

ghostshell

Malware indetectable, with AV bypass techniques, anti-disassembly, etc.

giuda

Ask a TGS on behalf of another user without password

goldencopy

Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.

hardeningauditor

Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides

hardhatc2

A C# Command & Control framework

havoc

The Havoc Framework

honeybadger

howtowinccdc

Notes, Slides, Comments and Commands on How to Win CCDC

hunt-detect-prevent

Lists of sources and utilities utilized to hunt, detect and prevent evildoers.

infosec-learning-materials

Resource for developing infosec skills for OSCP