sup3rm4n73 Goto Github PK

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penelope

Penelope Shell Handler

pentest-service-enumeration

Suggests programs to run against services found during the enumeration phase of a Pentest

php-reverse-shell

PHP reverse shell script. Works on Linux OS, macOS and Windows OS.

powershellrunner

PowerShell runner for executing malicious payloads in order to bypass Windows Defender.

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

quicksql

QuickSQL is a simple MSSQL query tool that allows you to connect to MSSQL databases and does not require administrative level rights to use.

redteaming_cheatsheet

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

sandman

Sandman is a NTP based backdoor for red team engagements in hardened networks.

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

sharkjack-payloads

The Official Hak5 Shark Jack Payload Repository

sharpnopsexec

Get file less command execution for lateral movement.

sipvicious

SIPVicious OSS is a set of security tools that can be used to audit SIP based VoIP systems.

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

ssh-backdoor

ssh-badkeys

A collection of static SSH keys (public and private) that have made their way into software and hardware products.

static-binaries

Various *nix tools built as statically-linked binaries

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

wi-fi-pentesting-cheatsheet

Personal notes used to pass the OSWP exam

wwwolf-php-webshell

WhiteWinterWolf's PHP web shell