doguile

Payloads

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

telegram-phone-number-checker

Check if phone numbers are connected to Telegram accounts.

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Bypass-WAF-SQLMAP

Bypass WAF SQL Injection SQLMAP

AD-Mastertools-collection

This is an AD pentest tools collection

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

PowerShell_IPv4PortScanner

Powerful asynchronus IPv4 port scanner for PowerShell

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

exifharvester

Tool for extracting EXIF metadata from website images

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

adPEAS

winPEAS, but for Active Directory

formcrawler

This script Crawl the website and find the urls that contains html forms.

DNSLookup

A comprehensive script for gathering detailed DNS information and performing network reconnaissance. Leverages multiple tools to query DNS records, perform reverse DNS lookups, attempt zone transfers, and more. Designed for network administrators and cybersecurity professionals to enhance domain analysis and security assessments.

remotes

This is a repository listing companies which offer full-time remote jobs with Spanish contracts

SQLi_Sleeps

AD_Miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

ADCSKiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

infoooze

A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.

CloakQuest3r

Uncover the true IP address of websites safeguarded by Cloudflare & Others

SSHniffer

Invoke-AccessCheck

a simple powershell wrapper to automate checking a user's access around the network

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

Chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

RoadtoOSCP

Herramientas, máquinas y recursos para enfrentarte al OSCP

safeVPN-THM

iptables rules to only have incoming connections from the machine on TryHackMe

knock

Knock Subdomain Scan

CEH-v11-Study-Guide

CyberPipe

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

LightMe

HTTP Server serving obfuscated Powershell Scripts/Payloads