murtishaw Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

amass

In-depth Attack Surface Mapping and Asset Discovery

amitt

AMITT (Adversarial Misinformation and Influence Tactics and Techniques) framework for describing disinformation incidents. Includes TTPs and countermeasures.

amitt_cti

AMITT STIX data

awesome-intelligence-writing

Awesome collection of great and useful resources concerning intelligence writing such as manuals/guides, standards, books, and articles

awesome-sec-s3

A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets

bloodhound

Six Degrees of Domain Admin

cheatsheets-1

Penetration Testing/Security Cheatsheets

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cve-2017-5645

CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization

cve-2018-7600

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

deepbluecli

documentation

Books, advice notes, and useful lists, written for people running and working on disinformation deployments

exploitdb

The official Exploit Database repository

go-scp

Go programming language secure coding practices guide

inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

mimikatz

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

passphrase-wordlist

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

pentest-bookmarks

Open Penetration Testing Bookmarks Collection

pentest_scripts

public_release

Files vetted, and approved for public release

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

top10

Official OWASP Top 10 Document Repository

winpwn

Automation for internal Windows Penetrationtest / AD-Security

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

yara-rules

Repository of YARA rules made by McAfee ATR Team