gerardomndz Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

censys-subdomain-finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

cissp-study-guide

study material used for the 2018 CISSP exam

cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

esapi-java-legacy

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

httpx

httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

hunt

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

metasploit-framework

Metasploit Framework

oscp

Collection of things made during my OSCP journey

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

osint_team_links

Links for the OSINT Team

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

red-baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

simplyemail

Email recon made fast and easy, with a framework to build on

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

sqli_example_basic

Examples basic for SQL injection.

thehive4py

Python API Client for TheHive

wscat

WebSocket cat

xss_example_basic