mohams3c Goto Github PK

php-reverse-shell

php-reverse-shell-1

PHP reverse shell script. Works on Linux OS, macOS and Windows OS.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

presentations

presentations-1

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

proof-of-concepts

A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.

proxyshell-auto

Automatic ProxyShell Exploit

proxyshell-poc

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

radare2book

Radare2 official book

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

rubeus

Trying to tame the three-headed dog.

sherlock

🔎 Hunt down social media accounts by username across social networks

sigma

Generic Signature Format for SIEM Systems

spiderfoot

SpiderFoot automates OSINT collection so that you can focus on analysis.

sql-injection-payload-list

🎯 SQL Injection Payload List

sublist3r

Fast subdomains enumeration tool for penetration testers

tetanus

Helper script for mangling CS payloads

theharvester

E-mails, subdomains and names Harvester - OSINT

toolbox-pentest-web

Docker toolbox for pentest of web based application.

tuktuk

Tool for catching and logging different types of requests.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

violent-python-companion-files

Violent Python scripts used in book and few other required files

vulnwhisperer

Create actionable data from your Vulnerability Scans

wargame-nexus

A sorted and updated list of security wargame sites.

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

web-application-cheatsheet

This cheatsheet is aimed at the CTF Players and Beginners to help them understand Web Application Vulnerablity with examples.