Brett's repositories
commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
SharedSecretRotation
A demonstration of how a client and server can handle secret rotation gracefully with zero downtime
Amass
In-depth Attack Surface Mapping and Asset Discovery
binwalk
Firmware Analysis Tool
chisel
A fast TCP/UDP tunnel over HTTP
ghidra
Ghidra is a software reverse engineering (SRE) framework
gobuster
Directory/File, DNS and VHost busting tool written in Go
goland
Go tools and explorations
GTFOBins.github.io
GTFOBins is a curated list of Unix binaries that can used to bypass local security restrictions in misconfigured systems
jadx
Dex to Java decompiler
LinEnum
Scripted Local Linux Enumeration & Privilege Escalation Checks
LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
Osmedeus
Fully automated offensive security framework for reconnaissance and vulnerability scanning
privilege-escalation-awesome-scripts-suite
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
radare2
UNIX-like reverse engineering framework and command-line toolset
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
The-Cloud-Advisory
This is repository for The Cloud Advisory channel
ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
ysoserial.net
Deserialization payload generator for a variety of .NET formatters