joeldeleep

ATTPwn

ATTPwn

AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2019, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

bruteforce-lists

Some files for bruteforcing certain things.

capsulecorp-pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

CertEagle

Weaponizing Live CT logs for automated monitoring of assets

chaos-client

Go client to communicate with Chaos DNS API.

CloudFlair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

Cloudmare

Cloudflare real IP tracker.

CloudPentestCheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

fc

Fuzzing Infrastructure with k8s & cephfs

github-search

Tools to perform basic search on GitHub.

grapX

grapX will iterate through the URLs and grep the endpoints with all possible extensions.

GreatSCT

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

Gxss

A tool to check a bunch of URLs that contain reflecting params.

impacket

Impacket is a collection of Python classes for working with network protocols.

IoT-PT

A Virtual environment for Pentesting IoT Devices

jwt-hack

jwt-hack is JWT hacking, security testing utility

KingOfBugBountyTips

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster.

My-Shodan-Scripts

Collection of Scripts for shodan searching stuff.

OSCP-Exam-Report-Template-Markdown

:orange_book: OSCP Exam Report Template in Markdown

relative-url-extractor

A small tool that extracts relative URLs from a file.

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

shhgit

Ah shhgit! Find GitHub secrets in real time

subjs

Fetches javascript file from a list of URLS or subdomains.

Veil

Veil 3.1.X (Check version info in Veil at runtime)

writeups