dmmca Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adape-script

Active Directory Assessment and Privilege Escalation Script

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

apt_report

Interesting apt report collection and some special ioc express

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

awesome-incident-response

A curated list of tools for incident response

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

awesome-windows-red-team

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

azure-policy

Repository for Azure Resource Policy built-in definitions and samples

caldera

Automated Adversary Emulation

cheatsheets

Helped during my OSCP lab days.

chrome-har-capturer

Capture HAR files from a Chrome instance

commando-vm

crackmapexec

A swiss army knife for pentesting networks

crossfeed

External monitoring for organization assets

crypton

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Hashing Algorithms along with example challenges from CTFs

cset

Cybersecurity Evaluation Tool

ctf-notes

Everything needed for doing CTFs

de4js

JavaScript Deobfuscator and Unpacker

dnsviz

domlink

A tool to link a domain with registered organisation names and emails, to other domains.

dostoevsky-pentest-notes

Notes for taking the OSCP in 2097. Read in book form on GitBook

emagnet

Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, microsoft rdp clients and gmail accounts

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

eval-deobfuscator

A systematic approach to JavaScript deobfuscation

exploit-database

The official Exploit Database repository

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack