tingting-cui Goto Github PK

adpeas

Powershell tool to automate Active Directory enumeration.

appsec.demo

aspx-reverse-shell

Aspx reverse shell

bashbunny-payloads

The Official Bash Bunny Payload Repository

bloodhound

Six Degrees of Domain Admin

cfm_shell_v3.0_edition

Cfm Shell v3.0 edition

checksec.sh

Checksec.sh

cmsmap

CMSmap tool v0.6 - Simple CMS Scanner

creep3r

This is a big smash up of a lot of various tools I have made in the past along with some new ones. It includes a array of tools for helping with pentesting and messing around on the net. Currently only have installer files made for Ubuntu & Debian systems, but if you know what you're doing you can easily read them and get what you need to get all the dependencies installed on your own. I made a quick basic demonstration video you to give a general overview of what it has included, you can watch it here: http://youtu.be/z9rq1SBIYI0 Here is another short video to show how the Dorker piece works: http://youtu.be/43aphr0QRng It's a bit of a constant work in progress but will be posting updates from time to time as I add more stuff and get them stabilized and working properly without much issue. If you have any questions, comments, or suggestions just let me know. Thanks, H.R.

cve-2018-7600

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

cve-2019-0708

A Win7 RDP exploit

debian-ssh

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

dirtycow

dirtycow-1

Dirtycow exploit for both 32 and 64-bit

dom-based-xss-demo

Lab to demostrate this vulnerability and attacks

evil-winrm

The ultimate WinRM shell for hacking/pentesting

exploits

Containing Self Made Perl Reproducers / PoC Codes

exploits-1

Some random exploits that may or may not be useful. Not responsible for misuse.

exploits-nt-privesc

Exploit collection for NT privilege escalation

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

groupenum

iis6-exploit-2017-cve-2017-7269

iis6 exploit 2017 CVE-2017-7269

impacket

Impacket is a collection of Python classes for working with network protocols.

infosec_blogs

Blogs about Information Security (Cryptography, Reverse Engineering) and Science (Quantum Physics and Mathematics) to follow

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

known_hosts-hashcat

A guide and tool for cracking ssh known_hosts files with hashcat

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

ms08_067

Updating MS08-067 Python exploit script

ms17-010

MS17-010

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.