0xjukai Goto Github PK

nsa-leaking

Collecting all the NSA leaking information

odin

Tool for automating penetration testing tasks (in development).

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

pathbrute

Pathbrute

phemail

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

prithvi

A Report Generation Tool for Security Assessment

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

red_team

Some scripts useful for red team activities

robocon-website-v

routeros

RouterOS Bug Hunt Materials Presented at Derbycon 2018

rta

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

samurai

Samurai Email Discovery - SED is a email discovery framework that grabs emails via google dork, company name, or domain name.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security-guide-for-developers

Security Guide for Developers (实用性开发人员安全须知)

securitybenchmarks-azure

Supplemental information and resources for the Security Benchmark documentation available at https://docs.microsoft.com/azure/security/benchmarks/.

serpico

SimplE RePort wrIting and COllaboration tool

signedpdf

A Python library for digitally signing PDFs

spf-bypass

This project demonstrates SPF-bypass techniques utilised by phishers to abuse domains that haven't been secured by DMARC.

spring-boot-security-saml

spring-security-saml integration with Spring Boot

spring-cloud-function-spel-rce

Spring-cloud-function-SpEL-RCE 批量检测脚本，反弹shell_EXP,欢迎师傅们试用

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

struts-pwn_cve-2018-11776

An exploit for Apache Struts CVE-2018-11776

sumrecon

Web recon script. No need to fear, sumrecon is here!

toys

vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

vietnam-password-lists

Lists of most common passwords in Vietnam

vietnamese-password-dicts

Tổng hợp danh sách mật khẩu wifi tiếng Việt sử dụng cho aircrack-ng