mikismaos

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

presentations

SpecterOps Presentations

LFI-Payload-List

LFI Payloads List coolected from github repos

Max

Maximizing BloodHound. Max is a good boy.

impacket

Impacket is a collection of Python classes for working with network protocols.

PasswordDecrypts

Handy Stored Password Decryption Techniques

msldap

LDAP library for auditing MS AD

garak

LLM vulnerability scanner

nuclei_poc

Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现（已有11wPOC，已校验有效性并去重）

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

RemoteKrbRelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

go-secdump

Tool to remotely dump secrets from the Windows registry

POSTDump

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

medusa

Binary instrumentation framework based on FRIDA

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

Telerecon

A reconnaissance framework for researching and investigating Telegram.

dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

JustEvadeBro

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

InlineExecute-Assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

Egress-Assess

Egress-Assess is a tool used to test egress data detection capabilities

cme-6.0-release-backup

latest crackmapexec somehow pulled from the internet...

eyeballer

Convolutional neural network for analyzing pentest screenshots

wipeout-rewrite

4-ZERO-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

zgrab2

Fast Go Application Scanner

at-ps

Adversary Tactics - PowerShell Training