active-directory-enumerators-impacketkerberos-crackmapexecsmb-ldapsearch

Automated Bash Script To Enumerate an Active Directory

antivirus-bypass-powershell-in-memory-injection

Script made for bypassing antivirus using Powershell Injection method. Place your shellcode from msfvenom on line 15, the script can be combined with the UAC bypass technique in order to gain a privileged reverse shell.

bug-bounty-enumerator

This is a self made bash script to enumerate for Bug Bounty Proposals

cve-2019-17240_bludit-bf-bypass

Bludit <= 3.9.2 - Authentication Bruteforce Mitigation Bypass Exploit/PoC

cve-2021-40438-apache-2.4.48-ssrf-exploit

CVE-2021-40438 Apache <= 2.4.48 SSRF exploit

definitive-host-and-tcp-udp-port-scanner-for-linux-pivoting

This script combines a host discovery & TCP port scan for the discovered hosts.

dns-zone-transfer-automated-script

DNS zone transfer automated script.

ecpptv2-personal-cheatsheet-esp-

Personal CheatSheet used for the exam made with Obsidian, download the repo and use the resources within Obsidian for a better experience. CHISEL & SOCAT BINARIES ARE WITHIN THE PIVOTING SECTION.

ejptv2-cheatsheet

eJPTv2 Cheatsheet for the exam, with commands and tools shown in the course.

godpotato

GodPotato Windows 11 - Server 2022 SeImpersonatePrivilege exploit

host-and-port-scanner-powershell-script-tcp-udp

This is a PowerShell script made for scanning hosts & ports that are connected to a Windows host, the scripts ask you for the input of an IP that are discovered doing ipconfig /all and then starts the scan of hosts, and if a host is discovered then starts a port scan.

host-and-port-scanner-python3-tcp-udp

This is a python3 script that reads the info of the ip a command and starts a host discovery and port scan for the discovered hosts.

host-scanner-for-linux-hosts-pivoting

This is a host scanner script made in bash, for /24 nets, thought-out for pivoting internal networks from a Linux Host that you have access, you just need to create the scanner file in the Linux host that has internal networks that you want to scan and copy the script content in there and modify what you need.

htb-scripts-for-retired-boxes

Just a place to share some things I've written while participating in Hack The Box.

lfi-rce-unauthenticated-apache-2.4.49-2.4.50

LFI / RCE Unauthenticated - Apache 2.4.49 & 2.4.50

netcat-32-y-64-bits

Netcat for windows 32/64 bit

procmon-privesc-lateralmovement

The procmon script is used to monitorize commands that were ran or will run on the system, in order to make privilege escalation and lateral movement on a Linux target.

python3-powershell-encoded-reverse-shell-payload-creator

Python3 PowerShell Encoded Reverse Shell Payload Creator

python3-website-subdomain-directory-bruteforce-enumerator

Python3 script that uses a given wordlist for doing subdomain enumeration or directories enumeration.

rpcclient-enum-smb-users

This is a bash script made for enumerating SMB users via rpcclient, modify the IP that you're aiming inside the script

rpcenum

Herramienta en Bash ideal para extraer la información más relevante de un dominio vía rpcclient.

scripts-for-exploiting-blind-sql-injection

These are bash scripts made for automating the exploitation of Blind SQL Injection Vulnerabilities

sergiovks

My personal repository

sergiovks.github.io

shellshock.py-and-referer-spoofing

Python3 shellshock exploit, for ethical hacking/pentesting purposes only. Use it at your own risk. I'm not responisble if you use it with illegal purposes.

smtp-user-enum-vrfy-method-and-pass-spray

Automated script that enumerates SMTP users with the VRFY method

snmp-enum-python-and-bash

SNMP enumeration automated Tools in python3 and bash

some-python-pentesting-scripts

Some Python Pentesting Scripts. (subdomain and directory enumeration, network and port scanner, file downloader, hash cracker, Keylogger and SSH Bruteforcer)

ssh-user-enum-python3-cve-2018-15473

SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3 instead of python2.

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing