0xanishp Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

aort

All in One Recon Tool for Bug Bounty

awesome-redteam-cheatsheet

Active Directory & Red-Team Cheat-Sheet in constant expansion.

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

aws-threat-simulation-and-detection

Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic

bash-oneliner

A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

evilnovnc

Ready to go Phishing Platform

fbi-tools

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

finalrecon

The Last Web Recon Tool You'll Need

goad

game of active directory

icmp-transfertools

Transfer files to and from a Windows host via ICMP in restricted network environments.

list-infosec-encyclopedia

A list of information security related awesome lists and other resources.

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

o365-doppelganger

A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user

oscp-cheatsheat

This is a cheatsheat for everything OSCP.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

rconn

rconn is a multiplatform program for creating generic reverse connections. Lets you consume services that are behind firewall or NAT without opening ports or port-forwarding.

sandboxdefender

C# code to Sandbox Defender (and most probably other AV/EDRs).

sauroneye

Search tool to find specific files containing specific words, i.e. files containing passwords..

security-sm

smap

a drop-in replacement for Nmap powered by shodan.io

thephish

ThePhish: an automated phishing email analysis tool

turbo-attack

A turbo traffic generator pentesting tool to generate random traffic with random mac and ip addresses in addition to random sequence numbers to a particular ip and port.

zphisher-gui-back_office

A Zphisher GUI Back-Office Plugin