pwnfuzzsec

awesome-privilege-escalation

A curated list of awesome privilege escalation

Cheatsheet-God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

nmap-vulners

NSE script based on Vulners.com API

uafbench

UAF Fuzzing Benchmark

uafuzz-1

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities

AWAE-PREP

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

chrome-sbx-db

A Collection of Chrome Sandbox Escape POCs/Exploits for learning

evil-winrm

The ultimate WinRM shell for hacking/pentesting

FreePBX-Reverse-Shell-Module

FreePBX Reverse Shell Module

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。

GTFOBins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

Hunting-Tips

impacket

Impacket is a collection of Python classes for working with network protocols.

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

OSCE-Exploit-Development

OSCP-60days

OSCP All Tools are Here ...!! ***

OSCP-Human-Guide

My own OSCP guide

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Penetration-Testing-Grimoire

Custom Tools and Notes from my own Penetration Testing Experience

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pspy

Monitor linux processes without root permissions

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

small

Smallest possible syntactically valid files of different types

SUDO_KILLER

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo

UACME

Defeating Windows User Account Control

vulnhub-writeups

Writeups for Vulnhub's boot2root machines that I've done

webshell

This is a webshell open source project