offsecop Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adpeas

Powershell tool to automate Active Directory enumeration.

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-1676

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2021-22986

CVE-2021-22986 & F5 BIG-IP RCE

cve-2022-41040-metasploit-proxynotshell

the metasploit script(POC) about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery (SSRF) attack. An authenticated attacker can use the vulnerability to elevate privileges.

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

gpp-decrypt

Tool to parse the Group Policy Preferences XML file which extracts the username and decrypts the cpassword attribute.

ms17-010

MS17-010

nessusreportmerger

Merges multiple .nessus files into one file.

offensivecloud

Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)

oscp-buffer-overflow

OSCP Buffer Overflow cheat sheet

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-cheat-sheets

A collection of snippets of codes and commands to make your life easier!

petitpotam

Python implementation for PetitPotam

proxyshell

ProxyShell POC Exploit : Exchange Server RCE (ACL Bypass + EoP + Arbitrary File Write)

proxyshell-scanner

nuclei scanner for proxyshell ( CVE-2021-34473 )

psbypassclm

Bypass for PowerShell Constrained Language Mode

random-powershell-work

Random PowerShell Work

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

scanning