sodejm

Pentest-Scripts

Useful scripts I have made for pentests. (nothing pretty)

Git-History-Scanner

run regexes against git history ideally to discover secrets. I make no guarantee that it is a currently working version as it is still in development.

AutomateTheBoringStuffTuts

Going through the http://automatetheboringstuff.com/ tutorials

ChromeCredExtractor

Extract credentials from chromes database on Windows systems

defcon-for-n00bs

Defcon for N00bs is an open guide for first time attendees to the convention.

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

FaceDetect

get-WMI-info

Uses remote WMIC queries to gather config data from a list of Windows machines and output to a csv

heartleech

Demonstrates the "heartbleed" problem using full OpenSSL stack

HTML5EmptySiteTemplate

http2pic

ident-user-enum

ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system.

kali-packer

Kali Linux 2.0 Packer Configuration

littleblackbox

Database of private SSL/SSH keys for embedded devices

masscan-web-ui

MASSCAN Web UI

PythonTheHardWay

Going through the Learn Python The Hard Way Site to see how it is.

Reversing-Notes

This will serve as a place to stash notes on reverse engineering. I don't plan to keep this actively up to date but may store things here over time for everyone's benefit.

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Security-Best-Practices

A Security and Privacy Guide for non-technical users

slack-night-mode

A Stylus style for easy Slack theming

SMBTrap

Tools developed to test the Redirect to SMB issue

ViolentPython

Scripts while reading the Violent Python book

Zines