joel-correa Goto Github PK

active-directory-kill-chain-attack-defense

Here we are elaborating the tactics, techniques, and procedures (TTPs) attackers are leveraging to compromise active directory and guidance to mitigation, detection, and prevention. And understand Active Directory Kill Chain Attack and Modern Post Exploitation Adversary Tradecraft Activity.

airixss

Finding XSS during recon

apache-log4j-poc

Apache Log4j POC

api-securityempire

API Security Projecto aims to present unique attack & defense methods in API Security field

awesome-arm-exploitation

A collection of awesome videos, articles, books and resources about ARM exploitation.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-cloud-pentest

awesome-privilege-escalation

A curated list of awesome privilege escalation

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

beaconator

A beacon generator using Cobalt Strike and a variety of tools.

burp-bounty-profiles

Burp Bounty profiles compilation, feel free to contribute!

callbackhell

PoC (DoS) for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cve-2021-1965

CVE-2021-1965 WiFi Zero Click RCE Trigger PoC

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cyberrange

The Open-Source AWS Cyber Range

edrhunt

Scan installed EDRs and AVs on Windows

electerm

📻Terminal/ssh/sftp client(linux, mac, win)

evilginx2-phishlets

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

git-hub

git hub local

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

handlekatz

PIC lsass dumper using cloned handles

invoke-sharploader

ios_15_rce

Remote Code Execution V1 For iOS 15 sent through airdrop after the device was connected to a trusted host

jndiexploit

A malicious LDAP server for JNDI injection attacks

khepri

Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.