Shirshakhtml

Bug_Bounty_Tools_and_Methodology

Bug Bounty Tools used on Twitch - Recon

RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

parallel

Ruby: parallel processing made simple and fast

SubProber

Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. The tool offers concurrent scanning, allowing users to define their preferred concurrency level for faster results. Whether you are on Linux, Windows, or macos

Resources

Quick-Kali

a few install files for kali, should be used on a brand new install of kali

BBTz

BBT - Bug Bounty Tools (examples💡)

FullBypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

Inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

noPac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

SharpMapExec

DomainPasswordSpray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

Cloud-Security

This Repo serves as a collection of shared security and penetration testing resources for the cloud.

Udemy-Red-Team-Hacking-Course

Active Directory Pentesting Full Course - Red Team Hacking

Certify

Active Directory certificate abuse.

active-directory-aspnetcore-webapp-openidconnect-v2

An ASP.NET Core Web App which lets sign-in users (including in your org, many orgs, orgs + personal accounts, sovereign clouds) and call Web APIs (including Microsoft Graph)

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

PKINITtools

Tools for Kerberos PKINIT and relaying to AD CS

GOAD

game of active directory

sourcemapper

Extract JavaScript source trees from Sourcemap files

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Ghost

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

pantagrule

large hashcat rulesets generated from real-world compromised passwords

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

vulnerable-code-snippet

Sample Vulnerable and Secure Code Snippets for Various Vulnerabilities

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

github_cves_search

Find CVEs associated to Linux and public exploits on github