grimangelx Goto Github PK

assetfinder

Find domains and subdomains related to a given domain

breach-parse

A tool for parsing breached passwords

bwapp-docker

bWAPP Docker Image

cupp

Common User Passwords Profiler (CUPP)

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dnscat2

for dns tunneling

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

haiti

:key: Hash type identifier (CLI & lib)

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

hydra_notes

Some notes about Hydra for bruteforcing

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

ldapsearch-ad

Python3 script to quickly get various information from a domain controller through his LDAP service.

nc.exe

Netcat for windows 32/64 bit

openvasreporting

OpenVAS Reporting: Convert OpenVAS XML report files to reports

owasp-amass

In-depth attack surface mapping and asset discovery

owasp-cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

php_filter_chain_generator

pimpmykali

Kali Linux Fixes for Newly Imported VM's

powercat

netshell features all in version 2 powershell

powerpxe

Powershell script to extract information from boot PXE

red-team-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

subjack

Subdomain Takeover tool written in Go

tcm-security-sample-pentest-report

Sample pentest report provided by TCM Security

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

thehive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform