shrv Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

api

Vulners Python API wrapper

aquatone

A Tool for Domain Flyovers

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burp-vulners-scanner

Vulnerability scanner based on vulners.com search API

cheatsheets-ai

Essential Cheat Sheets for deep learning and machine learning researchers

ctf

ctf_writeups

CTF Writeups

cve-2019-0708

A Win7 RDP exploit

cve-2019-0841

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

data_hacking

Click Security Data Hacking Project

domxsswiki

Automatically exported from code.google.com/p/domxsswiki

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

east

Exploits and Security Tools Framework 2.0.0

fuzzbunch

NSA finest tool

getsploit

Command line utility for searching and downloading exploits

gixy

Nginx configuration static analyzer

impacket

Impacket is a collection of Python classes for working with network protocols.

linkfinder

A python script that finds endpoints in JavaScript files

operation-red

A simple python scanner designed to find open redirect vulnerabilities.

osint-san

OSINT-SAN Framework дает возможность быстро находить информацию и деанонимизировать пользователей сети интернет. Программное обеспечение представляет собой framework, в котором содержатся 30 функций для поиска информации либо деанонимизации пользователей. С помощью моего ПО вы можете собирать информацию о пользователях в сети интернет, анонимно и без особых навыков.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poc

Various PoCs

powershell

procurve

script to control the configurations of identity on HP ProCurve

procurve-watch

Creating backups and monitoring changes on HP Procurve switches through SSH

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

seclists

SecLists is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security-onion

Linux distro for IDS, NSM, and Log Management