jbrizock Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

bloodhound

Six Degrees of Domain Admin

blue-team-wiki

Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries

breach-parse

A tool for parsing breached passwords

epv-api-scripts

These API scripts enable CyberArk users to automate privileged account management task like account creation, user management, and more.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

github-slideshow

A robot powered training repository :robot:

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

hotwax

Script to provision a curated set of pentesting tools into a Kali (supported) box.

impacket

Impacket is a collection of Python classes for working with network protocols.

john

John the Ripper 1.9.0-jumbo-1+bleeding-47a8a9b98 2019-08-26 20:19:16

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

magento-shoplift-python-exploit

Magento shoplift exploit is vulnerability which was discovered by CheckPoint team (http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/) This python script developed by joren but it was having some bug because of which it was not working properly. If magento version is vulnerable, this script will create admin account with username forme and password forme

metasploit-framework

Metasploit Framework

oscp

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

php-reverse-shell

physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pyenv

Simple Python version management

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

splunk-n-box

Docker Splunk "Orchestration" bash script (6,000+ lines) to create fully automated pre-configured splunk site-2-site clusters or stand alone containers. Awesome tool for training and testing!

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.