prageeth1985 Goto Github PK

403bypasser

allthethingsexec

Executes Blended Managed/Unmanged Exports

aol-bounty

aquatone

A Tool for Domain Flyovers

awesome-cve-poc_qazbnm456

beaconeye

Hunts out CobaltStrike beacons and logs operator command output

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cve-2020-23839

Public PoC Disclosure for CVE-2020-23839 - GetSimple CMS v3.3.16 suffers from a Reflected XSS on the Admin Login Portal

cve-2021-40444_builders

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

defcon-26-workshop-attacking-and-auditing-docker-containers

DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source

donpapi

Dumping DPAPI credz remotely

edrsandblast

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

exp101tsarchiv30thers

generate-macro

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

gitoops

all paths lead to clouds

hackingtool

ALL IN ONE Hacking Tool For Hackers

invoke-loginprompt

Invokes a Windows Security Login Prompt and outputs the clear text password.

k8s

Important production-grade Kubernetes Ops Services

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Rconnaissance (framework)

kubestriker

A Blazing fast Security Auditing tool for Kubernetes

kuppiya

This repo holds the contents used for sessions conducted over Kuppiya YouTube channel.

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

mbe

Course materials for Modern Binary Exploitation by RPISEC

nmap-scan-to-csv

Converts Nmap XML output to csv file, and other useful functions

notquite0dayfriday

This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.

oscp-prep

Contained is all my reference material for my OSCP preparation. Designed to be a one stop shop for code, guides, command syntax, and high level strategy. One simple clone and you have access to some of the most popular tools used for pentesting.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF