whoot

Jan Rude's starred repositories

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT60988 18420

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT58144 1910 267

mimikatz

A little tool to play with Windows security

Language:C19394 916 383

Probable-Wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

CC-BY-SA-4.08678 362 52

Empire

Empire is a PowerShell and Python post-exploitation agent.

Language:PowerShellBSD-3-Clause7439 489 781

PRET

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Language:PythonGPL-2.03913 197 70

tbhm

The Bug Hunters Methodology

3912 274 10

Invoke-Obfuscation

PowerShell Obfuscator

Language:PowerShellApache-2.03727 138 53

windows-privesc-check

Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

Language:Python1484 62 14

Hob0Rules

Password cracking rules for Hashcat based on statistics and industry patterns

1448 63 4

unix-privesc-check

Automatically exported from code.google.com/p/unix-privesc-check

Language:Shell1029 47 46

PowerMemory

Exploit the credentials present in files and memory

Language:PowerShellNOASSERTION837 73 9

ACLight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

Language:PowerShellBSD-3-Clause786 72 9

Invoke-WCMDump

PowerShell Script to Dump Windows Credentials from the Credential Manager

Language:PowerShellApache-2.0718 41 6

PowerCat

A PowerShell TCP/IP swiss army knife.

Language:PowerShellBSD-3-Clause560 39 3

pwnwiki.github.io

PwnWiki - The notes section of the pentesters mind.

Language:HTMLMIT555 83 39

swap_digger

swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.

Language:ShellGPL-3.0513 28 5

sjet

siberas JMX exploitation toolkit

Language:PythonMIT128 3 2