melons135

TempestSDR

Remote video eavesdropping using a software-defined radio platform

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

DNSenum

Bash script for DNS Enumeration.

WordLists

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

OSCE-exam-practice

Proof of Concept exploit scripts and fuzzing templates. Companion blog posts located at https://epi052.gitlab.io/notes-to-self/blog/2020-05-13-osce-exam-practice-part-one/

pentest-pivot-example

C-Sharp-Port-Scan

Simple C# Port Scanner (Multi-Threaded)

tbhm

The Bug Hunters Methodology

awesome-vulnerable

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

BinExp

Linux Binary Exploitation

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

OSCE-Prep

A list of freely available resources that can be used as a prerequisite before taking OSCE.

domain

Setup script for Regon-ng

RSMangler

RSMangler will take a wordlist and perform various manipulations on it similar to those done by John the Ripper with a few extras.

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

kerbrute

An script to perform kerberos bruteforcing by using impacket

rfi-lfi-payload-list

🎯 RFI/LFI Payload List

Privilege-Escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

OSCP-Human-Guide

My own OSCP guide

JAWS

JAWS - Just Another Windows (Enum) Script

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

dirsearch

Web path scanner

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

awesome-oscp

A curated list of awesome OSCP resources

gtfo

Search gtfobins and lolbas files from your terminal

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

nmapAutomator

A script that you can run in the background!

PayloadsAllTheThings