epicn1337

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

AD-Pentesting-Tools

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

buffer-overflow

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

EVA

FUD shellcode Injector

External-Pentest-Checklist

ffuf

Fast web fuzzer written in Go

fingerprintjs

Browser fingerprinting library with the highest accuracy and stability.

gitrob

Reconnaissance tool for GitHub organizations

Infosec_Reference

An Information Security Reference That Doesn't Suck

Oscp-Cheat-Sheet

wew oscp

OSCP-Priv-Esc

Mind maps / flow charts to help with privilege escalation on the OSCP.

OSCP-Stuff

List of Stuff I did to get through the OSCP :D

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

PowerSharpPack

PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

red_team_tool_countermeasures

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

ruler

A tool to abuse Exchange services

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

sqlmap

Automatic SQL injection and database takeover tool

SwiftnessX

A cross-platform note-taking & target-tracking app for penetration testers.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Web-Sec-CheatSheet

windapsearch

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries

Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.