pamhrituc

TryHackMe_Writeups

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

jupyter

Jupyter metapackage for installation, docs and chat

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

Sublist3r

Fast subdomains enumeration tool for penetration testers

sunburst_countermeasures

red_team_tool_countermeasures

TCM-Security-Sample-Pentest-Report

Sample pentest report provided by TCM Security

creddump7

Checklists

Red Teaming & Pentesting checklists for various engagements

static-binaries

Various *nix tools built as statically-linked binaries

rsatool

rsatool can be used to calculate RSA and RSA-CRT parameters

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

stellar-core

Reference implementation for the peer-to-peer agent that manages the Stellar network.

BurpSuite-Team-Extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

alpine-3-7-apache-php5-6

LXD Image: Alpine 3.7 (Apache, PHP5.6)

ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

sherlock

Hunt down social media accounts by username across social networks

WhatsMyName

This repository has the JSON file required to perform user enumeration on various websites.

dirtycow

Dirty Cow exploit - CVE-2016-5195

dirtycow.github.io

Dirty COW

zaproxy

The ZAP core project

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

OSCP-PwK

This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.

wfuzz

Web application fuzzer

Pentest-Tools

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

linux-exploit-suggester

Linux privilege escalation auditing tool